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Siebel  tries  to  close  the  book  on  its  problems  with  a  new  strategy  dubbed  Chap 
Capgemini’s  cost-savings  plan  for  TXU  Corp.  means  layoffs  for  some  outsoui' 
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Hot  Servers  Not 
So  Cool  for  Data 
Center  Managers 

Vendors  leap  ahead  with  dense,  fast  systems,  but 
cooling  issues  make  some  users  reluctant  to  buy 


BY  PATRICK  THIBODEAU 

ATLANTA 

Low-end  server  technology  is 
racing  ahead  of  the  ability  of 
many  data  centers  to  keep  the 
increasingly  dense  and  fast 
systems  cool,  a  problem  that’s 
stopping  some  IT  managers 
from  using  the  new  machines. 

Users  may  have  to  invest  in 
new  cooling,  monitoring 
and  power  equipment, 
or  even  retrofit  their 
data  centers  or  build 
new  ones,  to  accommo¬ 
date  the  servers. 

Data  center  managers 
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who  gathered  here  last  week 
for  an  AFCOM  conference 
said  server  and  processor  ven¬ 
dors  need  to  shift  from  build¬ 
ing  denser  systems  to  making 
ones  that  use  less  power.  They 
also  need  to  set  up  develop¬ 
ment  partnerships  with  ven¬ 
dors  of  cooling  and  power 
products,  conference  atten¬ 
dees  said. 

The  server  makers 
have  “set  their  sights  on 
making  things  faster 
and  smaller,  and  that’s 
all  well  and  nice,  but 
Hot  Servers,  page  49 


CRUNCHERS 


Some  big  corporations 
have  CFOs  of  IT  who 
oversee  billion-dollar 
technology  budgets  and 
ROI.  The  job  is  becoming 
tougher,  and  more  strate¬ 
gic,  as  IT  consumes  half 
of  all  capital  spending 
at  many  companies. 

By  Thomas  Hoffman 
PAGE  37 


ILM  Projects 
Go  Forward, 
But  Slowly 

IT  execs  face  internal, 
technical  challenges 

BY  LUCAS  MEARIAN 

LONG  BEACH.  CALIF. 

IT  managers  at  a  conference 
here  last  week  said  they  face 
daunting  tasks  in  trying  to  im¬ 


plement  information  life-cycle 
management  approaches,  in¬ 
cluding  classifying  data  based 
on  its  business  value  so  it  can 
be  stored  on  different  types  of 
devices. 

Another  big  challenge  is 
changing  the  attitudes  of  busi¬ 
ness  units  that  are  used  to  get¬ 
ting  premium  storage  for 
every  byte  of  data,  according 
to  about  10  attendees  at  the  in¬ 
augural  ILM  Solutions  Confer¬ 
ence,  which  was  sponsored  by 
ILM  Projects,  page  16 
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JBoss  App  Server  Gets  J2EE 
Compliance,  Draws  Interest 


Users  start  to  explore 
open-source  offerings, 
but  concerns  remain 

BY  CAROL  SLIWA 

IBM  and  BEA  Systems  Inc. 
hold  the  lead  in  the  applica¬ 
tion  server  software  market, 
but  the  recent  release  of  the 
first  J2EE-compliant  open- 
source  offering  from  JBoss 
|  Inc.  could  spark  more  corpo- 
8  rate  users  to  check  out  new 
□  options. 

>  A  half-dozen  users  of  lead- 

co 

°  ing  commercial  offerings  told 
l  Computerworld  that  they’re 


beginning  to  explore  open- 
source  alternatives  and  that 
Java  2  Enterprise  Edition  com¬ 
pliance  is  important  to  them. 
But  how  soon  or  how  serious¬ 
ly  open-source  application 
servers  might  challenge  the 
market  leaders  is  unclear. 

“We  will  eventually  imple¬ 
ment  open-source  servers  to 
help  minimize  costs,  but  our 


IBM  announces  a 
WebSphere  upgrade 
that  can  detect  system  outages 
and  quickly  shift  transaction 
workloads  to  different  machines 
to  minimize  downtime. 


strategy  is  to  deploy  low-risk 
apps  to  them,”  said  Gus  Tep- 
per,  vice  president  of  software 
development  in  the  interac¬ 
tive  division  at  First  American 
Title  Insurance  Co.  in  Santa 
Ana,  Calif. 

First  American’s  interactive 
division  currently  uses  BEA’s 
WebLogic  application  server. 
The  unit  is  considering  open- 
source  options  for  “well- 
established,  nonchanging  ap¬ 
plications,”  according  to  Tep- 
per.  But  that  will  happen  only 
after  “very  long  and  rigorous 
test  cycles,”  he  added. 

“Common  sense  tells  us  the 
future  of  reliability  and  scala¬ 
bility  comes  from  clusters  of 
commodity-based  hardware 
JBoss,  page  14 


Can  you  afford  to  change? 

The  time  has  come,  they  say,  to  transform  your  IT.  But  how? 
On  what  scale?  As  a  technology  company,  HP  creates— as 
no  financial  institution  can-opportunities  you  once  thought 
impossible,  and  lets  you  change  without  fear.  HP  consultants 
help  you  identify  the  hardware,  software  and  services  you’ll 
need.  Then  HP  Financial  Services  helps  you  finance  global 
migration  and  manage  the  technology  over  its  lifespan,  while 
minimizing  financial  risks.  Once  you  can  afford  change,  you 
might  even  embrace  it.  www.hp.com/info/hpfs 
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On-Demand  Collaboration.  Only  from  Polycom 


It'll  take  the  demands  off  you 


In  this  real-time  world,  instant  access  to  colleagues  around  the  globe  has  become  a  business  mandate.  Only  Polycom  can  bring 
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Connect.  Any  Way  You  Want, 


people  together  via  any  combination  of  video,  voice,  data  and  Web  collaboration  -  on-demand.  Without  complex  IT  intervention 
or  advance  reservations.  A  single  dial-in  number  or  buddy  list  securely  connects  any  number  of  participants,  over  any  network, 
any  protocol,  any  speed  or  any  collaboration  device.  And,  you  can  do  it  all  with  confidence  since  Polycom  has  the  most  widely 
used  unified  solution  in  the  world.  It's  really  that  simple.  Isn't  it  time  you  demanded  on-demand  collaboration  from  Polycom? 

Get  a  free  copy  of  the  Unified  Collaborative  Communications  whitepaper  at  www.polycom.com/ondemandcw  or  call 
1-877-POLYCOM 


Grazing  the  Nanograss 

In  the  Technology  section:  A  marriage 
of  materials  science  and  electronics, 
nanograss  may  cool  computers,  improve 
batteries  and  put  a  zoom  lens  in  your  cell 
phone.  At  left,  a  drop  of  water  glides  across 
a  nanograss  surface.  Page  30 
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Extending  Identity 

Also  in  the  Technology  section:  Federated 
identity  management  technologies  promise 
cost  savings  and  improved  access  to  networks, 
but  companies  have  been  slow  to  adopt  them 
because  they  have  concerns  about  trust  and 
interoperability.  Page  25 
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6  Siebel’s  new  CRM  strategy 

includes  less  monolithic  ap¬ 
plications  and  more  coordi¬ 
nated  services  offerings. 

7  Layoffs  begin  for  some  TXU 
Corp.  IT  workers  whose 
jobs  were  outsourced  to  a 
Capgemini  subsidiary  in  July. 

7  CA  buys  Netegrity  to  boost  its 
presence  in  the  IT  security 
market.  But  analysts  see  a  sig¬ 
nificant  overlap  between  the 
two  companies’  products. 

10  IBM’s  app  server  upgrade  is 

designed  to  cut  application 
downtime  by  shifting  work¬ 
loads  if  a  system  crashes. 

10  The  Navy  and  EDS  revamp 
the  $8.8  billion  Navy/Marine 
Corps  Intranet  contract  to  in¬ 
clude  clearer  metrics  for  mea¬ 
suring  EDS’s  performance. 

12  Companies  launch  counter¬ 
attacks  against  phishing 
scams  to  stop  customer  con¬ 
fidence  from  waning. 

14  Attachmate  adds  new  tools 

to  help  software  developers 
more  easily  tap  into  main¬ 
frame  data  when  building 
Web-based  applications. 

16  SAP  expands  the  new  Java  and 
business  intelligence  capabili¬ 
ties  built  into  its  NetWeaver 
middleware  and  application 
integration  suite. 

19  The  DHS  isn’t  doing  enough 

to  integrate  information 
stored  in  a  dozen  terrorist 
watch-list  databases,  accord¬ 
ing  to  a  new  report. 


28  Express  Delivery.  Application 
delivery  appliances  combine 
several  technologies  to  ensure 
fast,  secure  and  reliable  access 
to  Web-enabled  applications. 


32  Security  Manager’s  Journal: 
Security  Review  Uncovers 
Rampant  Virus  Infections. 

Our  new  journal  writer,  “C.J. 
Kelly,”  discovers  that  the  only 
thing  worse  than  having  a  net¬ 
work  infected  by  viruses  is 
having  them  discovered  by  an 
outside  security  assessment 
team  during  an  audit. 

MANAGEMENT 

37  The  Number  Crunchers.  Un¬ 
relenting  cost  pressures  have 
pushed  so-called  CFOs  of  IT 
into  the  spotlight.  But  they 
face  huge  challenges  as  they 
try  to  integrate  intangibles 
into  rigid  corporate  account¬ 
ing  systems. 

40  Q&A:  Senate  CIO.  J.  Greg 
Hanson’s  agenda  ranges  from 
e-mail  to  inaugurations  —  all 
in  the  national  limelight.  And 
talk  about  tough  customers. 

42  Career  Watch.  Making  career 
changes  and  dealing  with 
problem  employees;  top  busi¬ 
ness  schools  for  IT;  the  mor¬ 
phing  CIO;  and  small  compa¬ 
nies  take  the  lead  in  IT  hiring. 


8  On  the  Mark:  Mark  Hall  de¬ 
scribes  how  eBay  is  trying  to 
simplify  the  integration  of 
companies’  supply  chain  ap¬ 
plications  into  its  Web  site. 

20  Don  Tennant  suspects  that  the 
intolerant  mentality  of  Linux 
enthusiasts  is  hindering  the 
OS’s  adoption  by  perpetuating 
the  myth  of  its  immaturity. 

20  Thornton  A.  May  thinks  CFOs 
of  IT  will  play  a  big  role  in  the 
future,  and  the  data  that  he 
has  collected  shows  why. 

21  Pimm  Fox  bemoans  how  poli¬ 
tics  and  bureaucracy  are  tying 
up  funds  to  support  high¬ 
speed  Internet  and  phone  ser¬ 
vice  in  libraries  and  schools. 

34  Curt  A.  Monash  claims  that 
John  Kerry  has  the  edge  over 
George  W.  Bush  in  issues  that 
affect  IT  professionals. 

43  Bart  Perkins  says  ongoing  in¬ 
frastructure  and  support  costs 
for  new  developments  can 
throw  your  hard-won  budget 
out  of  whack.  Plan  carefully  to 
avoid  nasty  surprises. 

50  Frankly  Speaking:  Frank 
Hayes,  sitting  uncomfortably 
close  to  Mount  St.  Helens, 
knows  just  how  PeopleSoft 
customers  feel. 
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The  Testing  Time  Bomb 

DEVELOPMENT:  Sure,  you  test  the  functional¬ 
ity  of  new  code  that  you  add  to  your  soft¬ 
ware,  but  you’d  also  better  make  sure  that 
the  old  stuff  still  works  right,  says  columnist 
Linda  Hayes.  ©  QuickLink  49847 


Candidates  Miss 
Privacy  Concerns 

OPINION:  Columnist  Jay  Cline  says  George  W. 
Bush  or  John  Kerry  could  pick  up  the  support 
of  independent-minded  voters  by  voicing 
clear  support  for  upholding  privacy  rights 
during  the  Fight  against  terrorism. 

©  QuickLink  49851 

Take  Advantage  of  Longhorn’s  Lag 

OPERATING  SYSTEMS:  Two  Avanade  consul¬ 
tants  outline  how  the  delay  in  Microsoft’s 
next  operating  system  offers  you  some  time 
to  prepare  —  in  part  by  turning  to  often- 
underused  features  in  existing  versions  of 
Windows.  ©  QuickLink  49750 

How  to  Evaluate  a  Security  Threat 

SECURITY:  Mark  Stevens  ofWatchGuard 
Technologies  offers  a  checklist  of  nine  ques¬ 
tions  to  ask  when  gauging  the  seriousness  of 
a  new  threat.  ©  QuickLink  49123 

Hands  On:  Storage  Revamp 

STORAGE:  A  senior  systems  administrator 
praises  and  pans  various  backup  products. 

©  QuickLink  49862 
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Throughout  each  issue  of 
\^\Computerworld,  you'll 
see  five-digit  QuickLink  codes 
pointing  to  related  content  on 
our  Web  site.  Also,  at  the  end  of 
each  story,  a  QuickLink  to  that 
story  online  facilitates  sharing  it 
with  colleagues.  Just  enter  any 
of  those  codes  into  the  Quick¬ 
Link  box,  which  is  at  the  top  of 
every  page  on  our  site. 
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Novell  Postpones 
QES  Release  Plan 

Hove!!  Inc.  said  its  Open  Enter¬ 
prise  Server  software  wii!  ship  in 
February,  two  months  later  than 
the  December  release  date  it  set 
last  spring  [QuickLink  45763]. 
OES  will  run  on  top  of  both  the 
NetWare  and  Linux  kernels,  and 
Novell  said  it  decided  to  wait  for  a 
service  pack  for  its  SUSE  Linux 
Enterprise  Server  9  operating 
system  that’s  due  in  January. 


Sun,  Kodak  Agree 
To  Settle  Lawsuit 

Sun  Microsystems  Inc.  said  it  has 
agreed  to  pay  $92  million  to  settle 
a  patent  infringement  lawsuit  filed 
by  Eastman  Kodak  Co.  in  2002. 
The  settlement  was  announced  six 
days  after  a  federal  jury  in  New 
York  ruled  that  Sun’s  Java  pro¬ 
gramming  language  infringed  on 
three  Kodak  patents  related  to  the 
use  of  object  technologies.  Sun 
has  licensed  the  patents  for  use 
with  all  its  Java-based  products. 


Microsoft  Probes 
Flaw  in  ASP.Net 

Microsoft  Corp.  said  it’s  investi¬ 
gating  a  reported  vulnerability  in 
its  ASP.Net  software  that  could  al¬ 
low  an  attacker  to  bypass  security 
features  on  a  Web  server  and  view 
sensitive  content.  It  also  provided 
instructions  for  mitigating  the  ef¬ 
fects  of  the  vulnerability.  ASP.Net 
is  the  latest  version  of  Microsoft’s 
Active  Server  Pages  technology. 


Dell  Recalls  990k 
Notebook  Adapters 

Dell  Inc.  is  recalling  about 
990,000  electrical  adapters  that 
were  sold  from  1998  to  2002  for 
use  with  its  notebook  PCs.  The 
recall  followed  seven  reports  of 
overheating  problems  with  the 
adapters,  which  were  made  in  Chi¬ 
na  by  Taipei,  Taiwan-based  Delta 
Electronics  Inc.  The  adapters  pose 
a  risk  of  fire  or  electrical  shock, 
Dell  said,  adding  that  it  will  pro¬ 
vide  free  replacements. 
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For  Siebel,  New  Strategy 


Is  Next  Chapter 


Changes  approach 
on  development, 
technical  services 

BY  MARC  L.  SONGINI 

LOS  ANGELES 

TO  SOME  USERS  of 

Siebel  Systems  Inc.’s 
customer  relation¬ 
ship  management 
software,  a  “Chapter  2”  strate¬ 
gy  that  the  company  unveiled 
here  last  week  in  an  attempt  to 
revitalize  its  sagging  fortunes 
is  no  big  deal.  But  others  said 
they  were  buoyed  by 
the  new  approach 
that  Siebel  outlined. 

At  the  Siebel  User 
Week  conference 
here,  executives 
from  the  CRM  ven¬ 
dor  said  the  new 
direction  includes 
adding  a  compre¬ 
hensive  set  of  ana¬ 
lytical  applications, 
breaking  its  technol¬ 
ogy  into  components,  provid¬ 
ing  users  with  more  guidance 
on  deployments  and  better 
aligning  the  company’s  ser- 


users  who  were  interviewed  at 
last  week’s  conference,  the 
changes  made  by  Lawrie  since 
he  took  over  the  reins  from 
co-founder  Thomas  Siebel  in 
May  [QuickLink  46697]  are  a 
big  step  forward. 

“There  is  a  clarity  of  vision 
and  strategy  there  now  that 
was  not  present  before,”  said 
Richard  Napier,  business  de¬ 
velopment  manager  at  InFact 
Group,  a  software  consulting 
firm  and  systems  integrator 
in  Plano,  Texas.  InFact  uses 
Siebel’s  hosted  CRM  On- 

Demand  service  to 
support  its  internal 
operations  and  does 
Siebel-related  con¬ 
sulting. 

Napier  said  that 
Siebel’s  global  ser¬ 
vices  organization 
has  offered  more 
than  100  types  of  ed¬ 
ucational  or  consult¬ 
ing  services,  and  no 
one  at  the  software 
vendor  appeared  to  be  track¬ 
ing  which  particular  services 
were  being  proposed  to  which 
customers.  Now  Siebel  seems 


in  CRM 

Siebel’s  New  Plan 


Chapter  2 

■  Offer  users  a  less  monolithic 
set  of  CRM  applications  to 
break  the  technology  into  more 
digestible  pieces. 

■  Create  a  customer  blueprint 
program  to  help  guide  users  on 
implementations. 

■  Streamline  its  far-flung 
customer  service  organizations 
so  users  can  more  easily  iden¬ 
tify  where  to  go  for  help. 

*  Work  with  partners  to 
write  custom  software  for 
companies  that  have  unique 
business  requirements. 


to  be  getting  more  of  a  grip  on 
“how  a  software  house  should 
deliver  services,”  he  said. 

“I  still  don’t  think  they’ll  be 
100%  there,  but  they’re  on  the 
right  track,”  said  Roger  Mor¬ 
rell,  vice  president  of  IT  at 
Infonet  Services  Corp.,  an  El 
Segundo,  Calif.-based  network 
services  firm  that  runs  Siebel 
7.5  to  support  its  order  entry 


NEW  CEO 


J.  MICHAEL  LAWRIE 

says  “Chapter  2 
is  about  value.” 


www.computerworld.com 
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and  management  processes. 
“I’m  more  comfortable  [with 
Siebel’s  direction]  than  I  was  a 
year  ago,”  Morrell  added. 

To  users  at  Pitney  Bowes 
Inc.,  though,  Chapter  2  isn’t  so 
new.  “This  is  more  evolution¬ 
ary  than  revolutionary,”  said 
Mark  Davis,  vice  president  of 
customer  service  at  Pitney 
Bowes.  The  Stamford,  Conn.- 
based  maker  of  mailing  and 
document  management  sys¬ 
tems  runs  Siebel’s  customer 
service,  call  center  and  sales 
force  automation  software. 

Kathleen  Banashak,  director 
of  customer  service  opera¬ 
tions  at  Pitney  Bowes,  added 
that  Siebel  had  already  proved 
itself  a  worthwhile  partner 
and  developed  a  strong  rela¬ 
tionship  with  people  inside 
Pitney  Bowes  before  the  com¬ 
pany  even  decided  to  buy  the 
applications. 

But  Ian  Jacobs,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.,  said  the  plans  out¬ 
lined  by  Siebel  are  a  definite 
change  in  direction.  Jacobs 
said  the  company  essentially 
issued  a  mea  culpa,  acknowl¬ 
edging  that  for  many  users, 
its  portfolio  of  applications  is 
either  “too  complicated  to  im¬ 
plement,  too  complicated  to 
use  or  too  far  beyond  what 
their  actual  needs  are.” 

©  49956 


vices  units.  Siebel  said  it  ulti¬ 
mately  wants  to  move  beyond 
being  seen  as  just  a  technolo¬ 
gy  vendor  and  become  more 
of  a  partner  to  its  users. 

“The  first  generation  of 
CRM  was  about  a  product,” 
Siebel  CEO  J.  Michael  Lawrie 
said.  “It  was  about  the  tech¬ 
nology.  And  the  second  gener¬ 
ation,  Chapter  2,  is  about  val¬ 
ue.”  He  added  that  the  compa¬ 
ny’s  new  strategy  is  built 
around  the  concept  of  “help¬ 
ing  the  customer  get  closer 
with  their  customer,”  instead 
of  focusing  on  CRM  as  a  tech¬ 
nology. 

A  Step  Forward 

Siebel’s  sales  have  declined 
sharply  over  the  past  few 
years,  partly  as  a  result  of 
stiffer  competition  from  high- 
end  rivals  such  as  SAP  AG  and 
smaller  vendors  such  as  Sales- 
force.com  Inc.  But  for  several 
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Siebel  Expands  Its  Business  Intelligence  Apps 

LOS  ANGELES 


In  addition  to  its  other  Chapter  2 
initiatives,  Siebel  is  rolling  out  a 
more  extensive  set  of  business 
intelligence  offerings. 

At  a  Business  Intelligence 
Summit  that  was  held  concur¬ 
rently  with  Siebel  User  Week, 
the  software  vendor  announced 
the  release  of  20  analytical  ap¬ 
plications.  The  offerings  include 
a  tool  that  will  deliver  industry- 
specific  customer  analysis  func¬ 
tions  spanning  call  center,  sales 
and  marketing  operations.  Also 
being  added  is  financial  analysis 
software  for  optimizing  the  use 
of  corporate  assets,  a  tool  to 
help  evaluate  suppliers  and 
another  product  for  measuring 
employee  performance. 


Siebel  said  the  business  intel¬ 
ligence  applications  will  use  data 
integration  technology  from  In- 
formatica  Corp.  to  pull  in  data 
from  multiple  systems  and  deliv¬ 
er  it  in  real  time  to  end  users. 

Larry  Barbetta,  general  man¬ 
ager  of  Siebel  analytics,  said  the 
new  software  will  let  IT  man¬ 
agers  “democratically”  distribute 
information  throughout  their 
companies.  For  example,  call 
center  workers  might  not  need 
to  run  complex  reports  but  could 
use  the  business  intelligence 
tools  to  quickly  see  whether  a 
caller  is  a  valued  customer  and 
then  treat  him  accordingly. 

The  customer  analysis  soft¬ 
ware  sounds  “cool,”  said  Debra 
Domeyer,  chief  technology  offi¬ 


cer  at  CarsDirect.com  Inc.,  an 
online  automobile  retailer  in 
Sherman  Oaks,  Calif.,  that  uses 
Siebel’s  call  center  and  sales 
applications. 

The  analysis  tool  could  make 
it  easier  to  deliver  real-time  infor¬ 
mation  to  vehicle  makers  about 
the  configurations  that  shoppers 
are  seeking  when  they  order  cars 
online,  Domeyer  said,  adding 
that  such  a  capability  could  help 
the  manufacturers  improve  their 
inventory  management  process¬ 
es.  She  said  the  software  could 
also  make  it  possible  for  Cars- 
Direct.com  staffers  to  rapidly  an¬ 
alyze  the  results  of  sales  promo¬ 
tions  and  assess  variables  such 
as  regional  factors. 

-  Marc  L.  Songini 
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Outsourcing  Vendor  Starts  to 
Cut  IT  Workers  at  Texas  Utility 


Capgemini  plans 
layoffs,  shift  of  50 
apps  jobs  to  India 

BY  THOMAS  HOFFMAN 

Capgemini  Energy  LP,  which 
was  formed  in  July  to  manage 
IT  and  back-office  operations 
for  energy  conglomerate  TXU 
Corp.,  this  month  plans  to 
start  dismissing  about  230  for¬ 
mer  TXU  workers,  including 
50  to  75  technology  staffers. 

The  cuts  follow  the  Oct.  1 
expiration  of  a  three-month 
job  security  guarantee  for  the 
TXU  employees  and  include 
a  mix  of  layoffs  and  offshore 
moves.  For  example,  Capgemi¬ 
ni  Energy  CEO  Bob  Pryor  said 
last  week  that  about  50  appli¬ 
cation  development  and  main¬ 
tenance  positions  are  being 
shifted  to  a  facility  in  Banga¬ 
lore,  India,  that’s  owned  by 
parent  company  Capgemini. 

Pryor  added  that  Dallas- 
based  Capgemini  Energy  plans 
a  second  wave  of  downsizing 
at  TXU  in  February.  Although 
Pryor  declined  to  say  how 
many  positions  might  be  af¬ 
fected  at  that  time,  he  said 
some  IT  infrastructure  jobs 
will  eventually  be  transferred 
to  Bangalore  and  to  a  facility 
in  Krakow,  Poland. 

Slashing  Costs 

The  layoffs  and  offshore  trans¬ 
fers  are  part  of  Capgemini  En¬ 
ergy’s  cost-savings  strategy  for 
TXU,  which  is  also  based  in 
Dallas.  Pryor  said  that  before 
TXU  turned  to  the  outsourc¬ 
ing  vendor  to  provide  IT,  call 
center  and  business  services,  it 
was  spending  more  than  $1  bil¬ 
lion  a  year  on  sales,  general 
and  administrative  functions. 

“There’s  a  recognition  that 
their  costs  were  just  too  high,” 
Pryor  said.  The  operations 
that  were  outsourced  account 
for  $500  million  of  TXU’s 
SG&A  expenses,  he  added. 

On  Sept.  1,  Capgemini  Energy 
submitted  a  plan  to  TXU 
spelling  out  steps  it  would 


take  to  reduce  the  costs  by 
30%  over  the  next  16  months 
while  improving  IT  and  busi¬ 
ness-process  service  levels. 

As  part  of  the  outsourcing 
agreement,  Capgemini  Energy 
supports  the  bulk  of  TXU’s  IT 
operations,  including  its  IT  in¬ 
frastructure  and  its  desktop 
computing,  application  devel¬ 
opment  and  software  mainte¬ 
nance  activities. 

Pryor  said  that  of  the  2,700 
TXU  employees  who  trans¬ 
ferred  to  Capgemini  Energy 
as  part  of  the  10-year,  $3.5  bil¬ 
lion  outsourcing  agreement, 
roughly  800  work  in  IT-related 


Product  overlap 
issues  could  affect 
users,  analysts  say 

BY  JAIKUMAR  VIJAYAN 

Computer  Associates  Interna¬ 
tional  Inc.  last  week  said  it 
plans  to  buy  Netegrity  Inc.  in 
an  effort  to  boost  its  share  of 
the  market  for  identity  and  ac¬ 
cess  management  software. 

But  the  deal  may  result  in 
short-term  uncertainty  for 
users  because  of  what  analysts 
described  as  a  significant 
overlap  between  the  tools  sold 
by  CA  and  Netegrity. 

CA  said  it  has  agreed  to  pay 
$430  million  in  cash  to  acquire 
Waltham,  Mass.-based  Net¬ 
egrity,  which  offers  Web  ac¬ 
cess  control  and  end-user  au¬ 
thorization  software.  The  ad¬ 
dition  of  Netegrity  will  help 
CA  expand  its  eTrust  portfolio 
of  IT  security  products,  said 
interim  CEO  Kenneth  Cron 
during  a  press  conference. 

But  users  and  analysts  react¬ 
ed  more  cautiously. 

A  “rather  complete  overlap” 
in  products  could  mean  major 
problems  for  users,  said  Jon- 


positions.  The  first  round  of 
layoffs,  which  Capgemini  ex¬ 
pects  to  complete  early  next 
month,  could  reduce  the  IT 
workforce  by  as  much  as  9%. 

Rick  Nicholson,  an  analyst 
at  Meta  Group  Inc.,  noted  that 
the  TXU/Capgemini  contract 
is  complex  and  was  pulled  to¬ 
gether  in  a  relatively  short  pe¬ 
riod  of  time  —  in  only  about 
60  days,  from  what  he  was 
told.  “I  bet  there  are  a  number 
of  issues  that  will  pop  up  in 
the  first  year  of  the  deal  that 
they’ll  have  to  work  through,” 
he  said. 

Nicholson  also  questioned 


athan  Penn,  an  analyst  at  For¬ 
rester  Research  Inc.  For  in¬ 
stance,  Netegrity’s  SiteMinder 
software  is  a  direct  rival  to 
CA’s  eTrust  access  manage¬ 
ment  suite,  Penn  said.  Similar¬ 
ly,  the  application  provision¬ 
ing  technology  that  Netegrity 
acquired  as  part  of  its  pur¬ 
chase  of  Business  Layers  Inc. 
last  December  overlaps  with 
CA’s  provisioning  software, 
according  to  Penn. 

“I  think  there  is  going  to  be 
a  lot  of  near-term  confusion  as 
to  the  future  of  some  of  these 


AT  A  GLANCE 

What  Netegrity  brings  to 
the  table  for  CA: 

■  A  variety  of  Web  access  con¬ 
trol,  authorization  and  applica¬ 
tion  provisioning  tools. 

*  About  850  customers,  in¬ 
cluding  more  than  50  Fortune 
100  companies. 

■  Revenue  of  $78.4  million  in 

2003  and  $47.4  million  in  the 

first  half  of  this  year. 

•••«•••••••••« 

i  -  A  distribution  network  that 

consists  of  more  than  300 

channel  partners. 


TXU’s  former  IT  workers  and 
back-office  employees  will  face 
a  second  round  of  downsizing 
in  February,  said  Capgemini. 


whether  the  plan  to  transfer 
jobs  that  support  the  regulated 
side  of  TXU’s  business  out  of 
state  could  be  challenged  by 
the  Public  Utility  Commission 
of  Texas  or  by  state  legislators. 

But  Terry  Hadley,  a  spokes- 


products,”  he  said. 

Giuseppe  Cimmino,  direc¬ 
tor  of  corporate  technology  at 
Discovery  Communications 
Inc.  in  New  York,  said  it’s  still 
too  early  to  say  how  the  acqui¬ 
sition  will  affect  him  and  oth¬ 
er  users.  His  company,  which 
owns  the  Discovery  Channel 
and  other  cable  TV  program¬ 
ming  outlets,  uses  SiteMinder 
and  the  eProvisioning  soft¬ 
ware  that  Netegrity  inherited 
from  Business  Layers. 

“Our  main  concerns  will  be 
which  products  survive  and 
whether  there  are  any  impacts 
to  Netegrity’s  execution  of  the 
continued  integration  and  en¬ 
hancement  of  the  eProvision¬ 
ing  product,”  Cimmino  said. 

A  user  at  a  large  financial 
services  firm  expressed  con¬ 
cern  that  Islandia,  N.Y. -based 
CA’s  purchase  of  Netegrity 
could  result  in  higher  prices 
for  products  such  as  the  Iden- 
tityMinder  software  that  his 
company  uses. 

“Unfortunately,  my  opinion 
is  that  this  is  a  very  bad  move 
for  a  pretty  decent  product,” 
said  the  user,  who  asked  not  to 
be  identified.  He  added  that 
CA  “consistently  overcharges” 
for  its  software  and  said  he 
also  expects  technical  support 
costs  to  “rise  dramatically” 
from  what  Netegrity  currently 
charges. 


CA  Buys  Netegrity  to 
Expand  in  IT  Security 
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man  for  the  Austin-based  utili¬ 
ty  commission,  said  there  are 
no  existing  laws  that  would 
prevent  Capgemini  Energy  or 
TXU  from  moving  any  jobs 
out  of  the  state. 

Trey  Trainor,  chief  of  staff 
for  State  Rep.  Phil  King,  the 
chairman  of  the  Texas  Legisla¬ 
ture’s  committee  on  regulated 
industries,  said  that  the  panel 
doesn’t  have  any  hearings 
scheduled  and  that  the  legisla¬ 
ture  isn’t  scheduled  to  meet 
again  until  January. 

Capgemini  Energy  is  negoti¬ 
ating  with  several  other  com¬ 
panies  and  hopes  to  sign  at 
least  one  more  contract  by 
next  spring,  Pryor  said.  The 
firm  is  “waiting  to  see  how 
adding  other  clients  affects 
us”  on  staffing  before  finaliz¬ 
ing  plans  for  the  next  round  of 
cuts  at  TXU,  he  said.  O  49958 


It  can  take  years  for  CA  to 
fully  integrate  acquired  soft¬ 
ware  into  its  tightly  bundled 
product  suites,  said  Jon  Oltsik, 
an  analyst  at  Enterprise  Strate¬ 
gy  Group  Inc.  in  Milford, 

Mass.  For  instance,  five  years 
after  CA  bought  Platinum 
Technology  Inc.,  integration 
of  the  two  companies’  prod¬ 
ucts  remains  “a  work  in 
progress,”  Oltsik  said.  “I 
expect  the  same  between 
Netegrity  and  eTrust,  so 
we’re  likely  to  see  nothing 
but  slideware  for  a  while.” 

Toby  Weiss,  senior  vice 
president  of  eTrust  product 
management  at  CA,  said  the 
company  will  release  a  prod¬ 
uct  integration  road  map  after 
the  acquisition  is  completed, 
which  is  expected  by  year’s 
end.  In  response  to  the  con¬ 
cerns  about  overlapping  prod¬ 
ucts,  Weiss  insisted  that  there 
are  only  superficial  similari¬ 
ties  between  Netegrity’s  soft¬ 
ware  and  CA’s  tools. 

Netegrity’s  strategic  focus 
on  Web  services  security  tech¬ 
nology  complements  CA’s 
strengths  in  client/server  ac¬ 
cess  control  and  directory 
management,  Weiss  said.  “I 
think  this  merger  ultimately 
gives  users  the  deepest  and 
broadest  set  of  identity  man¬ 
agement  products,”  he  added. 
©  49959 
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SunOard  to  Undo 
Merger  Via  Spin-off 

SunGard  Data  Systems  Inc.  said  it 
will  split  into  two  companies  early 
next  year  by  spinning  off  its  disas¬ 
ter  recovery  unit.  The  move  will 
undo  the  1983  merger  that  creat¬ 
ed  SunGard,  although  the  Wayne, 
Pa.-based  company  said  the  dis¬ 
aster  recovery  unit  and  its  finan¬ 
cial  services  software  division 
have  operated  independently  of 
each  other  all  along.  No  layoffs 
are  planned,  SunGard  added. 


Former  Peregrine 
Execs  Face  Charges 

A  federal  grand  jury  in  San  Diego 
indicted  eight  former  executives 
of  Peregrine  Systems  Inc.  on 
charges  of  conspiracy  to  commit 
securities  fraud.  The  charges  cov¬ 
er  a  period  from  March  1999 
through  May  2002.  John  Mutch, 
who  took  over  as  Peregrine’s 
CEO  last  year,  said  the  San  Diego- 
based  software  vendor  “fully 
cooperated  with  the  government 
in  its  investigations  and  will  con¬ 
tinue  to  do  so.” 


Sun  Details  Plans 
For  Faster  CPU 

Sun  Microsystems  Inc.  introduced 
a  new  UltraSparc  IV  processor 
designed  to  double  application 
performance,  with  features  such 
as  multithreading  and  expanded 
caches  and  buffers.  The  Ultra- 
Sparc  IV+  will  also  have  a  higher 
clock  speed  than  Sun’s  existing 
chips,  and  plans  call  for  it  to 
reach  2  GHz  one  day.  Shipments 
are  due  to  start  in  mid-2005. 


Short  Takes 

The  fiscal  2005  cap  on  H1B 
VISAS  for  foreign  workers  was 
reached  on  Oct.  1,  the  day  the  fed¬ 
eral  fiscal  year  began.  The  cap 
was  reached  even  faster  than  had 
been  expected  [QuickLink 
49794]. . . .  ADVANCED  MICRO 
DEVICES  SMC.  reported  that  its 
third-quarter  revenue  was  below 
plan,  but  it  said  that  microproces¬ 
sor  :>ales  remained  strong. 
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Web  Services  Put 
EBay,  PayPal  in . . . 

. . .  your  supply  chain  pocket.  Enterprises  like  Dell  Inc.,  IBM 

and  the  state  of  Oregon  already  use  eBay  Inc.  and  its 
PayPal  Inc.  online  payments  division  to  profitably 
move  unwanted  capital  goods  that  are  gathering  dust 
on  their  shelves  into  the  hands  of  people  who  can 


actually  use  them.  But  eBay, 
which  gets  a  small  cut  from 
each  transaction  processed 
on  its  site,  sees  a  huge  growth 
opportunity  if  it  can  make  it 
even  easier  for  companies  to 
leverage  its  global  buying 
community  within  their  sup¬ 
ply  chains.  Not  a  bad  idea, 
since  the  online  auc¬ 
tion  site  handled  more 
than  $12  billion  worth 
of  transactions  last 
year.  So  San  Jose- 
based  eBay  is  bulking 
up  its  Web  services 
offerings  in  an  at¬ 
tempt  to  entice  third- 
party  and  corporate 
developers  to  more  tightly  in¬ 
tegrate  its  online  auction  and 
payment  technologies  into 
packaged  and  custom  appli¬ 
cations.  Matt  Ackley,  senior 
director  of  strategic  partner¬ 
ships  at  eBay,  points  to  the 
company’s  development  of 
another  way  to  expose  its  ap¬ 
plication  programming  inter¬ 
faces,  through  a  Web  service 
called  Representational  State 
Transfer,  or  Rest.  The  tech¬ 
nology  is  designed  to  support 


secure  transactional  opera¬ 
tions  over  the  Web  and  is 
now  in  beta.  Ackley  is  cagey 
about  the  final  release  date, 
but  he  says  it  won’t  be  long. 
Greg  Isaacs,  eBay’s  senior 
manager  for  platform  evange¬ 
lism,  says,  “We  didn’t  origi¬ 
nally  look  at  Web  services  as 
a  competitive  advan¬ 
tage,  but  now  we  do.” 
The  company  also  has 
struck  deals  with  Bor¬ 
land  Software  Corp. 
and  Microsoft  Corp.  to 
integrate  tools  for  pro¬ 
grammers  to  easily 
link  eBay  and  PayPal 
into  applications  with 
their  respective  software  de¬ 
velopment  platforms.  A  ver¬ 
sion  of  Borland’s  JBuilder 
suite  for  Java  will  likely  ship 
with  eBay’s  tools  in  early  ’05, 
Isaacs  says.  Windows  devel¬ 
opers  won’t  need  to  wait  that 
long.  Borland  will  provide 
eBay  integration  for  .Net  ap¬ 
plications  when  it  releases  an 
update  to  its  Delphi  program¬ 
ming  environment  later  this 
month.  And  Microsoft  will  in¬ 
clude  similar  capabilities  in  a 


planned  release  of  Visual  Stu¬ 
dio  Express  early  next  year. 
Who  know's?  Maybe  the  new, 
used  and  simply  weird  stuff 
idly  depreciating  on  your 
company’s  books  can  make 
some  money  alongside  all  the 
Elvis  paraphernalia. 

Web  app  development 
demands . . . 

. . .  thinking  small.  That’s  the 
argument  Jason  Fried  makes. 
He’s  the  founder  of  37  Signals 
LLC,  a  Web  development 
house  in  Chicago.  Fried  ap¬ 
plies  smallness  not  just  to  the 
development  team,  but  to  the 
application  itself.  Don’t  make 
a  half-baked  product,  “make 
half  a  product,”  he  says.  Re¬ 
jecting  end-user-friendly 
schools  of  thought,  Fried  says 
IT  developers  “ought  to  say 
no  by  default”  to  users’  re¬ 
quests  for  added  features. 

Not  necessarily  to  their  faces, 
but  as  a  matter  of  internal 
policy.  The  point,  he  says,  is 
to  deliver  a  solid  product  as 
quickly  as  possible,  and  you 
can’t  do  that  if  you’re  con¬ 
stantly  throwing  in  new  re¬ 
quirements.  Plus,  the  hidden 
costs  of  adding  features  dur¬ 
ing  development  can  be  oner¬ 
ous.  For  example,  developers 
may  have  to  update  docu¬ 
mentation  and  modify  user 
interfaces.  Fried  thinks  a  bet¬ 
ter  idea  is  to  include  the  most 
sought-after  new  features  in 
an  update  as  soon  as  30  days 
after  you  release  an  applica¬ 
tion.  That  approach  builds 
goodwill  among  end  users 
and  reduces  the  chance  that 
you’ll  encounter  those  hidden 
costs,  he  claims. 

Protect  your  app . . . 

. . .  with  a  software  licensing 
tool.  New  York-based  jPro- 
ductivity  LLC  will  ship  a  new 
version  of  its  Protection  li¬ 
censing  framework  that  lets 
developers  control  usage 
rights.  Alexander  Krivov,  the 
company’s  CEO,  claims  that 
even  corporate  IT  shops  need 
to  protect  their  intellectual 


property.  He 
says  that  in  a 
world  where 
Web  services 
and  Java  com¬ 
ponents  are 
intermingling 
in  applica¬ 
tions,  IT 
managers 
should  have 
more  fine¬ 
grained  con¬ 
trol  over  maintaining  then- 
rights  to  code.  The  new  pro¬ 
fessional  version  of  Protec¬ 
tion  ships  at  the  end  of  this 
month  and  supports  a  variety 
of  license  models.  Pricing 
starts  at  $299. 

Users  push  Plumtree 
onto  Java  train . . . 

. . .  with  the  company’s  recent 
release  of  its  Enterprise  Web 
Suite  portal.  According  to  Jay 
Simons,  vice  president  of 
product  marketing  and  strate¬ 
gy  at  Plumtree  Software  Inc. 
in  San  Francisco,  the  100% 
Java  product  was  necessary 
not  just  to  win  bids,  but  to 
compete  at  all.  “This  opens 
up  opportunities  that  we 
haven’t  been  able  to  compete 
for  because  some  companies 
have  an  ideology  about  pure 
Java,”  Simons  says.  The  soft¬ 
ware  runs  only  on  Solaris 
now,  but  expect  AIX,  HP-UX 
and  Linux  releases  over  the 
next  six  months.  You  also 
might  want  to  look  at  Plum- 
tree’s  6.0  release  of  its  Con¬ 
tent  Server  software.  Due 
next  month,  the  upgrade  lets 
you  use  Microsoft  Office 
applications  to  locate,  open, 
alter  and  save  files  in  your 
Plumtree  portal.  Although 

that  was  pos¬ 
sible  before 
through  a  se¬ 
ries  of  menu 
choices,  Con¬ 
tent  Server 
6.0  makes  it 
a  point-and- 
click  fea¬ 
ture.  Cool. 
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15° 

Portion  of 
total  online 
sales  done  on 
eBay,  says 
Forrester 


KRIVOV: 

Add  licensing 
rights  to  cor¬ 
porate  apps. 


"Instead  of  putting  out  fires,  we  now  focus 
on  ways  we  can  deploy  new  technologies 
that  benefit  our  customer  service." 


Dave  Chacon 

Manager,  Technical  Services,  PING 


Microsoft 

Your  potential  Our  passion. 


NAME  fP' 

Mr.  40%  Less 
Time  Spent  on 
Maintenance  and 
Administration 

PING 


Make  a  name  for  yourself  with  Windows  Server  System.™  Microsoft  Windows  Server  System 
makes  it  easier  for  golf  club  maker  PING  to  manage  the  infrastructure  serving  their  400  end  users. 
Here's  how:  By  using  Windows  Server™2003  with  Active  Directory,®  PING  now  centrally  manages 
all  its  servers,  desktops,  and  end  users  from  one  location.  This  cut  annual  administrative  time  by 
800  hours.  Time  that  can  now  be  spent  developing  new  ways  to  support  customers,  partners, 
and  employees.  Software  that's  easier  to  manage  is  software  that  helps  you  do  more  with  less. 
Get  the  full  PING  story  at  microsoft.com/wssystem 


Windows 
Server  System 
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IBM  App  Server  Upgrade  Aims 
To  Recfuce  System  Downtime 


New  WebSphere  release  can  detect 
outages,  shift  data  processing  workloads 


BY  HEATHER  HAVENSTEIN 

bm  last  week  unveiled 
an  upgrade  of  its  Web¬ 
Sphere  application  server 
software  that  includes 
new  features  designed  to  pro¬ 
tect  applications  from  system 
downtime  and  boost  efforts  by 
developers  to  create  service- 
oriented  architectures. 

Version  6  of  the  WebSphere 
Application  Server  can  detect 
system  outages  and  ensure 
that  transactions  are  handed 
off  to  another  server  to  quick¬ 
ly  restore  processing  opera¬ 
tions  and  minimize  the  finan¬ 
cial  impact  of  downtime,  said 
Bob  Sutor,  IBM’s  director  of 
WebSphere  foundation  soft¬ 
ware.  “If  these  transactions 
don’t  take  place  or  are  stalled 
in  some  way,  someone  is  going 
to  have  to  pay,”  he  said. 

Sutor  added  that  instead  of 
forcing  end  users  to  wait  while 
a  server  is  restarted,  Web¬ 
Sphere  can  document  what 
the  disabled  system  was  doing 
when  it  crashed  and  shift  the 
transaction  workload  to  a  fail¬ 
over  machine  in  the  same  data 
center  or  at  another  location 
—  all  in  less  than  10  seconds. 

The  features  are  designed  to 
meet  the  needs  of  large  com¬ 
panies  that  require  “a  lot  of  as¬ 
surances  and  a  lot  of  fault  tol¬ 
erance,”  said  Shawn  Willett, 


Correction 

Due  to  inaccurate  information 
provided  by  storage  switch  ven¬ 
dor  McOata  Corp.,  a  story  in  last 
week's  News  section  contained 
several  errors  about  the  technol¬ 
ogy  being  used  as  part  of  a  stor¬ 
age-area  network  project  at 
State  Street  Corp.'s  investment 
management  unit  ("financial 
firm  Consolidates  SANs  With 
Eye  Toward  ILivT).  A  corrected 
version  of  the  story  >s  on  our  Web 
site  at  QuickLmk  49780. 


an  analyst  at  Current  Analysis 
Inc.  in  Sterling,  Va.  “This  just 
senses  things  and  does  the  re¬ 
covery  automatically.” 

Walt  Smith,  chief  architect 
in  IT  at  a  large  financial  insti¬ 
tution,  said  the  functionality 
developed  by  IBM  would  be 
very  appealing  if  it  works  as 
promised.  “We  have  many 
mission-critical  transactions 
that  could  benefit  from  the 
ability  to  perform  geographic 
fail-over  without  loss  of  in¬ 
flight  data,”  he  said,  referring 
to  transactions  that  are  being 
processed  when  a  system 


Clarify  contract 
specs,  copy  private 
IT  best  practices 

BY  DAN  VERTON 

WASHINGTON 

The  U.S.  Navy  and  Electronic 
Data  Systems  Corp.  have 
agreed  to  scale  back  and 
streamline  the  performance 
measurements  used  to  evalu¬ 
ate  the  progress  that  EDS  is 
making  on  the  $8.8  billion 
Navy/Marine  Corps  Intranet 
(N/MCI)  project. 

Navy  and  EDS  officials  said 
this  month  that  the  agreement 
reduces  the  number  of  N/MCI 
service-level  agreements  from 
44  to  seven  and  cuts  the  num¬ 
ber  of  performance  categories 
from  192  to  27. 

Kevin  Clarke,  a  spokesman 
for  EDS  Government  Solu¬ 
tions,  said  the  changes  are  de¬ 
signed  to  improve  the  N/MCI 
network’s  efficiency.  “Both  the 
[Navy]  and  EDS  recognized 
the  need  to  establish  more 
clearly  defined  performance 


problem  arises.  “The  caveat 
would  be  that  the  technology 
would  have  to  be  bulletproof, 
because  our  customers  would 
not  tolerate  any  failure  of  the 
backup  mechanism,”  added 
Smith,  who  asked  that  his  em¬ 
ployer  not  be  identified. 

Differentiation  Trend 

With  Version  6,  IBM  is  also 
standardizing  the  WebSphere 
programming  model  across 
the  entire  product  family  and 
continuing  a  shift  of  the  J2EE 
application  server  market  to¬ 
ward  differentiation  through 
proprietary  features,  said  Mas¬ 
simo  Pezzini,  an  analyst  at 
Gartner  Inc.  “Users  should 
come  to  terms  with  this  trend 


metrics  that  more  resemble 
commercial  IT  practices,”  he 
said,  adding  that  the  revamped 
contract  provisions  give  EDS  a 
better  idea  of  the  service  lev¬ 
els  it  must  meet  to  achieve 
“100%  seat  billing”  on  N/MCI 
deployments. 

Rear  Adm.  James  Godwin, 
the  Navy’s  N/MCI  program 
director,  said  the  new  SLAs 
and  performance  categories 
should  save  money  by  reduc¬ 
ing  administrative  complexity 
and  enable  the  Navy  and  EDS 
to  more  effectively  monitor 
end-user  experiences. 

“For  instance,  instead  of  fo¬ 
cusing  on  how  long  it  took  an 
e-mail  to  travel  from  sender  to 
receiver,  we  were  measuring 
how  long  the  e-mail  took  to  go 
from  the  sender  to  the  first 
server,  then  to  the  second 
server,  then  to  the  third,  until 
the  e-mail  finally  reached  the 
receiver,”  Godwin  said. 

He  added  that  Navy  officials 
“came  to  realize  that  our  seg¬ 
mented,  incremental  approach 
to  measuring  N/MCI’s  perfor- 


and  evaluate  the  trade-off 
between  greater  functionality 
but  risk  of  lock-in  versus  free¬ 
dom  of  choice  but  higher  de¬ 
velopment  costs,”  he  said. 

The  new  release  is  due  by 
year’s  end.  IBM  said  it  will  sup¬ 
port  several  Web  services  stan¬ 
dards  and  include  a  new  mes¬ 
saging  engine  for  exchanging 
event  data  between  systems. 
Version  6  has  a  wizard-based, 
drag-and-drop  user  interface 
designed  to  automate  common 
application  development  tasks. 

Application  availability  will 
also  be  a  key  focus  in  the  next 
release  of  BEA  Systems  Inc.’s 
rival  WebLogic  application 
server,  which  is  due  next  sum¬ 
mer.  WebLogic  users  will  be 


The  Navy  will  use  this  weighting 
approach  to  evaluate  EDS’s  per¬ 
formance  on  the  N/MCI  contract: 


Network  availability 

35% 

End-user  services 

25% 

Network 

performance 

25% 

Security  ' 1 

15% 

mance  was  flawed  and  really 
didn’t . . .  reflect  the  end-user 
services  received.” 

Other  contract  changes  in¬ 
clude  replacing  an  incentive 
provision  under  which  EDS 
received  extra  payments  for 
meeting  or  exceeding  SLAs 
with  one  that  penalizes  the 
company  if  it  falls  short  of 
agreed-to  service  levels.  The 
penalties  would  be  applied  on 
a  quarterly  basis,  whereas  the 
incentives  were  paid  annually. 

In  addition,  performance 
measurements  will  now  be 


Navy,  EDS  Modify  Performance 
Measurements  on  Intranet  Project 
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NEW  FEATURES 
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weuopnere 
Application  Server  6.0 

■  Support  for  J2EE  1.4  and 
Web  services  standards  such 
as  WS-Transactions  and 
WS-Security 

■  Fail-over  functionality  to 
protect  Internet  applications 
from  server  outages 

■  A  system-to-system  messag¬ 
ing  engine  designed  to  boost 
performance  and  enable  simpler 
connections  into  enterprise  IT 
backbones 


able  to  deploy  and  test  a  new 
version  of  a  Web  service  on  a 
production  system  without 
having  to  shut  down  the  exist¬ 
ing  application,  according  to 
BEA  officials.  They  added  that 
users  will  be  able  to  apply 
software  patches  to  servers 
without  bringing  down  appli¬ 
cations  that  are  running  on  a 
cluster  of  systems.  ©  49961 


weighted  according  to  the 
Navy’s  service  priorities  in¬ 
stead  of  assigning  uniform 
weighting  to  all  performance 
categories  (see  chart).  And 
end-user  satisfaction  surveys 
will  affect  a  portion  of  avail¬ 
able  incentive  funds  for  the 
contractor,  Godwin  said. 

N/MCI  is  an  enterprisewide 
network  designed  to  connect 
about  360,000  sailors,  Marines 
and  civilian  employees  at 
more  than  300  bases  in  the 
U.S.  and  overseas.  The  pro¬ 
gram  is  the  largest  federal  IT 
contract  ever  awarded,  but  it 
has  posed  challenges  for  EDS. 

The  company  reported  op¬ 
erating  losses  of  $316  million 
stemming  from  the  contract 
during  the  first  half  of  this 
year,  according  to  a  filing  sub¬ 
mitted  to  the  U.S.  Securities 
and  Exchange  Commission. 
The  filing  also  said  that  EDS 
has  tied  $775  million  worth  of 
assets  to  N/MCI.  EDS  plans  to 
provide  additional  informa¬ 
tion  on  the  progress  of  N/MCI 
when  it  releases  its  third-quar¬ 
ter  earnings  on  Oct.  25. 

“N/MCI  remains  a  focus 
for  EDS,  given  the  contract’s 
size,  use  of  cash  and  impact 
on  earnings,”  Clarke  said. 

©  49942 
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It  is  one  of  the  biggest  threats  to  your  enterprise  today.  Spyware 
steals  bandwidth,  halts  productivity  and  puts  your  intellectual 
property  in  harm’s  way.  Webroot  Spy  Sweeper  Enterprise  offers 
real-time  protection  by  identifying  and  eradicating  spyware  across 
your  organization.  To  see  the  magnitude  of  the  spyware  threat,  run 
a  free  network  scan  at  www.webroot.com/whoaboy  or  contact  us 
at  866.254.5914 
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PeopleSoft  Director 
Says  Deal  Possible 

A  member  of  PeopleSoft  Inc.’s 
board  of  directors  said  in  a  Dela¬ 
ware  court  that  there’s  a  “high 
certainty”  that  the  company 
would  accept  Oracle  Corp.’s 
hostile  takeover  offer  if  the  price 
were  high  enough. 

“Never  did  we  imply  that  there 
were  no  set  of  conditions  under 
which  we  could  imagine  being 
acquired  by  Oracle,”  said  board 
member  Steven  Goldby.  He  was 
testifying  during  a  trial  in  which 
Oracle  is  challenging  PeopleSoft’s 
anti-takeover  defenses. 


EC  Relaunches  Its 
Probe  of  Oracle  Bid 

The  European  Commission  said  it 
has  restarted  its  investigation  into 
Oracle’s  bid  for  PeopleSoft  after 
Oracle  “substantially  complied” 
with  a  request  for  more  informa¬ 
tion  that  was  issued  in  April.  The 
commission  also  set  a  Nov.  9 
deadline  for  ruling  on  whether  it 
would  seek  to  block  an  acquisi¬ 
tion  of  PeopleSoft  by  Oracle,  al¬ 
though  a  decision  is  expected  to 
be  issued  later  this  month. 


Canadian  Retailer 
Divests  Apps  Work 

Boston-based  Keane  Inc.  said  its 
Canadian  subsidiary  has  signed  a 
five-year  deal  to  take  over  main¬ 
tenance  of  existing  applications 
for  Shoppers  Drug  Mart  Corp.,  a 
Toronto-based  drugstore  chain. 
The  two  companies  said  77  IT 
workers  will  be  shifted  to  Keane 
as  part  of  the  agreement.  Finan¬ 
cial  details  weren’t  disclosed. 


Short  Takes 

UNISYS  CORP.  announced  plans 
to  lay  off  about  1,400  workers,  a 
move  that  will  reduce  its  37, 000- 
person  workforce  by  4%. . . . 
Looking  to  increase  its  market 
presence  in  Europe,  AVAYA 
INC.  said  it  has  agreed  to  pay 
$835  million  to  buy  Tenovis 
GmbH,  a  vendor  of  telecommuni¬ 
cations  systems  in  Frankfurt. 


Companies  Fight  Back 
Against  Phishing  Scams 


Take  action  to  curb  costs,  stem  loss  of 
customer  confidence  —  and  customers 


BY  JAIKUMAR  VIJAYAN 

The  potential  ero¬ 
sion  of  consumer 
confidence  in  the 
online  transaction 
process  and  the  cost  to  com¬ 
panies  resulting  from  phishing 
scams  has  triggered  a  multi¬ 
faceted  response  from  some 
organizations. 

For  example,  London-based 
Barclays  Bank  PLC  said  last 
week  that  it  has  signed  up  for 
an  antifraud  service  from  New 
York-based  Cyota  Inc. 

Cyota’s  FraudAction  service, 
which  Barclays  piloted  for 
three  months  earlier  this  year, 
is  designed  to  help  the  bank 
more  quickly  detect  and  shut 
down  phishing  scams  involv¬ 
ing  the  use  of  its  brand.  Fraud- 
Action  uses  a  network  of 
probes  seeded  around  the  Web 
to  scan  more  than  400  million 
e-mails  a  day  looking  for  signs 
of  phishing  attacks,  said  Amir 
Orad,  a  Cyota  vice  president. 

In  some  instances,  the  ser¬ 
vice  has  helped  Barclays  de¬ 
tect  and  shut  down  scamming 
attacks  in  less  than  one  hour, 
said  Stuart  MacKenzie,  senior 
portfolio  manager  at  Barclays. 

“We  wanted  to  ensure  that 
we  protected  the  integrity 
of  the  channel  and  kept  cus¬ 
tomer  confidence  at  a  level 
where  Barclays  customers 
continued  using  [online  chan¬ 
nels],”  MacKenzie  said. 

Barclays’  move  is  similar 
to  one  announced  recently  by 
eBay  Inc.,  which  is  another 
favorite  target  of  phishers. 
EBay  is  using  so-called  Web 
Caller-ID  technology  from 
Austin-based  WholeSecurity 
Inc.  that’s  designed  to  allow 
eBay  users  to  verify  the  au¬ 
thenticity  of  a  Web  site. 

Other  companies  are  taking 
action  against  phishing  attacks 
as  well.  Last  week,  the  New 
York-based  Financial  Services 
Technology  Consortium 


(FSTC)  said  a  counterphishing 
initiative  announced  on  Sept. 
20  had  so  far  attracted  11  fi¬ 
nancial  services  companies 
and  17  technology  vendors. 
The  initiative  is  focused  on 
developing  technology  and 
operational  safeguards  for 
countering  phishing.  Partici¬ 
pants  include  CitiGroup  Inc., 
J.P.  Morgan  Chase  &  Co.  and 
Visa  U.S.A.  Inc. 


Growing  Threat 


The  efforts  come  at  a  time 
when  there  has  been  a  signifi¬ 
cant  increase  in  the  number 
of  phishing  attacks,  which 
involve  the  use  of  fake  e-mails 
and  Web  sites  to  extract  con¬ 
fidential  information  from 
users.  The  Anti-Phishing 
Working  Group,  an  industry 
association,  reported  1,974 
unique  phishing  attacks  in  July 
and  said  that  average  monthly 
growth  rates  had  been  exceed- 


The  Costs  of 


Phishing 


*  Per-attack  costs:  Incurred 
from  going  after  and  shutting 
down  rogue  sites,  cleaning  up 
and  law  enforcement. 


*  Psr-affected-custorner  costs: 
Increased  support,  handling  com¬ 
promised  accounts  and  dealing 
with  actual  fraud. 


a  Prevention  costs:  Incurred  in¬ 
dependent  of  number  of  attacks 
or  number  of  affected  customers. 


■  Long-term  costs:  Loss  of  trans¬ 
action  volumes,  loss  of  Internet 
channel  and  loss  of  customers. 


ing  50%  to  that  point. 

Companies  are  being  forced 
to  respond  because  of  costs, 
said  Gene  Neyer,  a  managing 
executive  of  the  FSTC  effort. 

“There  is  a  cost  to  the  banks 
in  terms  of  loss  of  consumer 
confidence;  there’s  a  cost  to 
banks  in  terms  of  their  ability 


to  conduct  their  own  business 
[over  the  Internet],”  Neyer 
said.  Other  costs  come  from 
the  sharp  increase  in  customer 
support  calls  following  a 
phishing  attack  and  the  ex¬ 
pense  related  to  replacing 
compromised  cards  or  pass¬ 
words  and  other  confidential 
data,  he  said. 

Dealing  with  the  problem 
involves  battles  on  multiple 
fronts,  MacKenzie  said,  and 
technology  approaches  such 
as  Cyota’s  address  only  part  of 
the  problem.  Because  phishing 
attacks  cross  international 
borders,  broad  cooperation 
among  law  enforcement  au¬ 
thorities  and  Internet  service 
providers  in  different  coun¬ 
tries  is  required  to  effectively 
deal  with  the  issue,  he  said. 
Greater  effort  also  needs  to  be 
made  in  educating  people 
about  the  issue,  he  added. 

“You  can  have  great  mouse¬ 
traps  for  catching  such  at¬ 
tacks,  but  it’s  very  difficult  to 
shut  them  down,”  given  the 
cross-border  nature  of  the 
problem,  said  Avivah  Litan,  an 
analyst  at  Gartner  Inc.  Even 
so,  deploying  defensive  mea¬ 
sures  is  the  best  that  compa¬ 
nies  can  do,  she  said. 

“It’s  better  than  not  doing 
anything,”  Orad  said.  ©  49944 
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Vendors  Add  Weapons  to  Battle  E-mail  Viruses 


THE  ABILITY  of  new  e-mail 
viruses  to  spread  before  fixes 
become  available  for  them  is 
nudging  some  vendors  to  look 
beyond  traditional  signature- 
based  antivirus  technology. 

Last  week,  Lindon,  Utah- 
based  Avinti  Inc.,  a  start-up  with 
over  $30  million  in  venture  capi¬ 
tal  funding,  introduced  an  e-mail 
security  appliance  designed  to 
detect  and  block  as-yet-uniden- 
tified  e-mail  viruses. 

Unlike  reactive  signature- 
based  products  that  block  virus¬ 
es  by  matching  patterns,  Avinti’s 
isolation  server  looks  for  devia¬ 
tions  in  e-mail  behavior  to  identi¬ 
fy  threats.  It  intercepts  all  e-mail 
heading  into  a  corporate  network 
and  looks  at  all  attachments  or 
executables  in  the  body. 

E-mail  attachments  and  exe¬ 


cutables  are  opened  in  a  virtual 
execution  module  and  inspected 
for  behaviors  suggesting  mali¬ 
cious  intent.  Suspect  e-mail  is 
quarantined  or  filtered  out  based 
on  user  preferences. 

The  technology  doesn’t  re¬ 
place  signature-based  antivirus 
products,  said  Teney  Takahashi, 
an  analyst  at  The  Radicati  Group 
Inc.  in  Palo  Alto,  Calif.  “It’s  prob¬ 
ably  most  effective  as  part  of  a 
comprehensive  antivirus  strat¬ 
egy,”  he  said. 

The  Make-A-Wish  Foundation 
of  Utah  has  been  testing  the  iso¬ 
lation  server  for  a  few  months 
and  has  found  it  to  be  quite  use¬ 
ful,  said  network  administrator 
Darren  Massey  in  Salt  Lake  City. 

Despite  some  early  problems 
with  false  alarms,  the  technology 
helped  block  a  recent  virus  that 


had  gotten  past  the  organiza¬ 
tion’s  defenses,  Massey  said. 

“It’s  given  us  another  layer  of 
protection,”  he  said. 

Avinti’s  announcement  is  sim¬ 
ilar  to  the  one  made  earlier  this 
month  by  IronPort  Systems  Inc., 
a  San  Bruno,  Calif.-based  ven¬ 
dor  of  e-mail  security  appliances 
and  services.  IronPort  now  sells 
an  appliance  featuring  the  new 
Virus  Outbreak  Filter,  which  uses 
information  culled  from  an  Iron- 
Port  spam-filtering  database  to 
identify  new  e-mail  viruses. 

In  beta  tests  by  Electronic 
Data  Systems  Corp.  and  some  of 
its  customers,  the  IronPort  filters 
have  provided  warnings  about 
new  viruses  hours  in  advance, 
said  Richard  Parvins,  a  systems 
engineer  at  EDS. 

-  Jaikumar  Vijayan 
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New  Tools  Let  Users  Open 
Mainframe  Data  to  Wen  Apps 


Attachmate  adds  software  that  enables 
blending  of  legacy  info,  Web  services 


BY  HEATHER  HAVENSTEIN 

TTACHMATE  CORP.  is 
upgrading  its  main¬ 
frame  connectivity 
product  line  with  a 
pair  of  new  tools  designed  to 
help  software  developers 
more  easily  tap  into  legacy 
data  when  building  Web- 
based  applications. 

The  Bellevue,  Wash.-based 
vendor  last  week  announced 
its  Synapta  Presentation 
Builder  and  Services  Builder 
tools,  which  abstract  main¬ 
frame  data  so  developers  can 
use  it  in  new  types  of  applica¬ 
tions.  Markus  Nitschke,  vice 
president  of  corporate  market¬ 
ing  at  Attachmate,  said  the 
new  tools  “provide  legacy  ac¬ 
cess  and  put  a  layer  of  abstrac¬ 
tion  on  top  so  you  can  create  a 
Web  service,”  enabling  main¬ 
frame  applications  to  be  incor¬ 
porated  into  service-oriented 
architectures  (SOA). 

Harbor  Federal  Savings 
Bank  in  Fort  Pierce,  Fla.,  has 
used  the  Synapta  products 
to  build  access  to  customer 
account  data  housed  on  a 
Unisys  Corp.  mainframe  into 
Web  services  that  support  on¬ 
line  banking  transactions  and 
inquiries,  said  Annetta  Smith, 
the  bank’s  vice  president  of  IT. 

“We  needed  to  ...  be  able  to 
go  and  hit  the  host  and  hit  dif¬ 


ferent  parts  of  the  host,”  Smith 
said.  With  Synapta,  the  bank’s 
developers  can  direct  the  Web 
services  to  retrieve  the  main¬ 
frame  data,  she  added. 

Vendors  such  as  Attach¬ 
mate,  WRQ_Inc.  and  NetMan- 
age  Inc.  are  trying  to  meet  de¬ 
mand  for  tools  that  can  help 
developers  take  internally 


Continued  from  page  1 

JBoss 

and  not  large  proprietary  box¬ 
es,”  said  Chris  Brien,  a  systems 
analyst  at  Mark’s  Work  Wear- 
house  Ltd.  in  Calgary,  Alberta. 

The  retail  chain  is  using 
IBM  iSeries  servers,  which 
bundle  WebSphere  with  the 
hardware,  so  open-source  ap¬ 
plication  server  software  isn’t 
yet  part  of  its  IT  planning,  ac¬ 
cording  to  Brien.  But  he  said 
he  expects  that  will  change. 

Thomas  Murphy,  an  analyst 
at  Meta  Group  Inc.,  said  that 
his  firm  has  seen  open-source 
application  servers  primarily 
used  for  development  purpos¬ 
es  but  that  it’s  starting  to  see 
corporate  uptake  of  the  JBoss 
Application  Server  in  produc¬ 
tion  applications.  Still,  the 
JBoss  server’s  market  share  re¬ 
mains  small,  at  about  5%,  Mur¬ 
phy  said. 

Some  companies,  such  as 
Hawaiian  Electric  Co.,  contin¬ 
ue  to  harbor  concerns  about 
support.  The  Honolulu-based 
power  company  runs  the 
Apache  Tomcat  servlet  con¬ 
tainer  in  its  test  environment 
and  has  debated  bringing  the 
server  into  production,  ac¬ 
cording  to  Richard  Eber,  direc¬ 
tor  of  development  services. 

“The  IT  staff  is  spread  so 
thin  that  it  is  difficult  to  be 
able  to  develop  an  in-depth 
knowledge  in  any  one  prod¬ 
uct,”  he  said.  “If  we  were  to 


facing  applications  and  expose 
them  to  external  users  without 
having  to  touch  the  mainframe 
code,  said  Dale  Vecchio,  an  an¬ 
alyst  at  Gartner  Inc. 

“Products  like  Synapta  are 
generally  noninvasive,”  Vec¬ 
chio  said.  “SOA  is  the  savior  of 
the  mainframe  [because]  it’s 
going  to  cause  people  to  use 
the  business  logic  in  place  and 
expose  it  as  services.” 

First  American  Default 
Technologies  in  Anaheim, 


Calif.,  has  used  WRQ’s  Vera- 
stream  host  integration  soft¬ 
ware  to  tie  its  mainframe  data 
to  an  online  loan-tracking  ap¬ 
plication  built  around  Micro¬ 
soft  Corp.’s  .Net  technology. 
With  Verastream,  the  mort¬ 
gage  default  servicing  compa¬ 
ny  was  able  to  provide  bankers 
and  lawyers  with  Web-based 
access  to  loan  information 
stored  on  its  mainframe,  said 
Glen  Banta,  First  American’s 
director  of  client  technology. 


use  an  open-source  applica¬ 
tion  server  in  production,  we 
would  need  to  have  a  support 
contract  with  someone  we 
could  call  24-by-7  in  case  we 
got  in  over  our  heads.” 

Eber  said  Hawaiian  Electric 
has  been  a  Microsoft  shop  for 
years  and  is  only  beginning  to 
get  its  arms  around  J2EE  tech¬ 
nology.  So  far,  that  tends  to  be 
when  one  of  its  software  prod¬ 
ucts  requires  J2EE,  such  as  the 
Vignette  Corp.  software  that 
supports  its  Internet  and  in¬ 
tranet  presence. 

Support  Factor 

Unlike  some  open-source  of¬ 
ferings,  support  is  available 
for  the  new  JBoss  Application 
Server  4.0.  Pricing  starts  at 
$10,500  per  year  for  a  single 
application,  according  to  a 
JBoss  spokeswoman.  Support 
and  services  are  also  available 
from  JBoss  Authorized  Ser¬ 
vice  Partners,  which  include 
Computer  Associates  Interna¬ 
tional  Inc.,  Hewlett-Packard 
Co.,  Novell  Inc.  and  Unisys 
Corp. 

But  support  isn’t  the  only 
factor  holding  back  some 
companies.  Ramu  Kannan,  a 
director  of  IT  at  Humana  Inc., 
said  the  Louisville,  Ky.-based 
health  care  provider  wants  to 
limit  the  number  of  applica¬ 
tion  servers  it  needs  to  deploy. 
Its  choice  of  application 
servers  is  driven  by  the  rec¬ 
ommendations  of  independent 
software  vendors,  and  so  far, 


Application  Server 
Usage  Survey 

BEA  WebLogic  Server 

Development 
Production 

IBM  WebSphere 

Development 
Production  MU 


361 

349 


JBoss  Application  Server 

Development  316 

Production  213 

Oracle  Application  Server 

Development  180 
Production  162 

Survey  base:  1,148  middleware  professionals 
drawn  from  TheServerSide.com,  an  online 
community  of  J2EE  practitioners 

Note:  Listed  products  were  top  four  respons¬ 
es.  Study  was  commissioned  by  Sun  Micro¬ 
systems.  The  Middleware  Co.  is  a  wholly 
owned  subsidiary  of  Veritas  Software  Corp. 

SOURCE:  THE  MIDDLEWARE  CO..  JUNE  2004 


they  either  haven’t  steered 
Humana  toward  open-source 
products  or  have  certified 
their  applications  only  for 
IBM’s  WebSphere  or  BEA’s 
WebLogic,  Kannan  said. 

Walt  Smith,  chief  architect 
in  IT  at  a  large  U.S.-based  fi¬ 
nancial  institution  that  he 
asked  not  be  named,  said  his 
company  requires  tight  inte¬ 
gration  of  its  J2EE-based  ap¬ 
plication  server  with  its  secu¬ 
rity  infrastructure  to  protect 
mission-critical  customer  ap- 


Developers  were  also  able 
to  abstract  and  isolate  the 
mainframe  data  in  order  to 
create  a  series  of  reusable  ser¬ 
vices  that  can  be  combined 
with  new  business  logic  in  Vi¬ 
sual  Studio  .Net,  Banta  added. 

“You  just  go  through  using 
their  design  tools  and  map  out 
your  screens,”  he  said.  “Once 
we  have  these  models  to  ac¬ 
cess  the  host  system,  it  basical¬ 
ly  turns  the  mainframe  into  a 
SQL  database  so  you  can  lever¬ 
age  all  types  of  applications.” 

The  Synapta  tools  are  due 
for  release  next  month.  Pric¬ 
ing  starts  at  $125,000  per  run¬ 
time  for  Presentation  Builder 
and  $65,000  per  runtime  for 
Services  Builder.  ©  49960 


plications.  He  declined  to 
identify  the  application 
server  vendor,  citing  security 
concerns. 

“We  view  the  distributed 
application  server  as  a  core 
component  of  our  services  ar¬ 
chitecture  and  therefore  re¬ 
quire  a  higher  degree  of  inter¬ 
operability  and  integration 
support  for  legacy  systems 
than  is  available  in  most  open- 
source  application  servers,” 
Smith  said. 

Now  that  the  JBoss  offering 
has  gained  J2EE  1.4  certifica¬ 
tion,  interoperability  concerns 
may  be  less  of  a  worry. 

But  Shawn  Willett,  an  ana¬ 
lyst  at  Current  Analysis  Inc.  in 
Sterling,  Va.,  noted  that  JBoss 
is  “very  techie,”  geared  more 
toward  hard-core  program¬ 
mers,  and  that  it  doesn’t  have 
all  the  “bells  and  whistles” 
that  the  commercial  offerings 
from  IBM  and  BEA  do. 

“They  are  working  on  it,” 
Willett  said,  adding  that  At¬ 
lanta-based  JBoss  has  added 
support  for  enhanced  features 
such  as  clustering. 

The  competition  is  certainly 
paying  attention  to  open- 
source  application  servers. 
BEA,  for  instance,  stopped 
charging  for  developer  licens¬ 
es  in  March  2003  in  response 
to  the  growing  usage  of  free 
options,  said  Eric  Stahl,  senior 
director  of  product  marketing 
at  BEA.  Other  vendors,  includ¬ 
ing  IBM,  have  also  done  that. 
©  49955 


Profiles  in  Business  Mobility  Productivity 


Working-from-Home  Walter  now  gets  more 
done  in  slippers  than  in  wingtips. 


NAME:  Working-from-Home  Walter 


QUOTE:  “Who  says  I  have  to  be  at  work  to  be 
hard  at  work?” 


CHALLENGE:  His  company  needs  him.  His  family  needs  him. 


Learn  how  to  mobilize  your  team  and  increase  business 
productivity.  Download  “The  Anytime,  Anyplace  World” 
white  paper  at  nokiaforbusiness.com 


MEETS  HIS  NEEDS  by  letting  him  work 
on  his  home  PC  when  he  needs  to  and 
still  have  access  to  business-critical 
applications  like  email,  sales  data,  and 
enterprise  resource  planning  software. 


MEETS  HIS  COMPANY’S  NEEDS  by  creating  a  more 
flexible  yet  cost-effective  and  secure  work 
environment  for  valuable  employees. 


NOKIA’S  ANSWER  FOR  IT.:  Nokia  Secure  Access 
System  for  SSL  VPN  Connectivity 


IMOKIA 

Connecting  People 


SOURCE:  STORAGE  NETWORKING  INDUSTRY  ASSOCIATION 
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SNI A  Plans  Standards  Work  to  Help  Boost  ILM  Usage 


LONG  BEACH.  CALIF. 


Less  than  10%  of  all  corporate 
data  is  transactional,  according 
to  consultancy  McKinsey  &  Co. 
The  rest  is  fixed  data  that  poten¬ 
tially  could  be  stored  on  low-end 
disk  arrays.  Yet  prior  to  being 
archived,  the  vast  majority  of 
data  is  still  stored  on  primary 
disk  systems  with  annual  operat¬ 
ing  costs  of  between  45  and  55 
cents  per  megabyte. 

“If  you’re  not  accessing  it, 
don’t  leave  it  there,”  said  Lou 
Harvey,  a  member  of  the  Stor¬ 
age  Networking  Industry  Associ¬ 
ation’s  Data  Management  Fo¬ 
rum.  “That’s  where  your  cost 
savings  will  be  realized.” 

How  to  lower  storage  costs 
through  the  use  of  standardized 
ILM  practices  was  the  focus  of 
several  discussions  led  by  mem¬ 


bers  of  the  SNIA’s  ILM  Technical 
Working  Group  at  the  ILM  Solu¬ 
tions  Conference.  Working 
group  members  also  detailed 
plans  to  develop  best-practice 
guidance  for  users  and  vendors 
to  follow  in  automating  the  mi¬ 
gration  of  data  across  tiers  of 
storage  devices. 

Chief  among  the  efforts  that 
will  take  place  over  the  next  two 
years  are  initiatives  to  standard¬ 
ize  the  way  different  industries 
classify  their  data  for  storage 
and  create  interoperability  stan¬ 
dards  between  business  appli¬ 
cations  and  the  middleware 
used  to  manage  data  migration 
procedures. 

“Classify  the  data,  and  we  can 
build  whatever  storage  facilities 
we  need  to  store  it,”  said  Jim 
Carlson,  a  senior  technical 


staffer  at  IBM’s  storage  systems 
division  and  a  member  of  the  ILM 
working  group  within  the  SNIA. 
Carlson  said  it  should  take  the 
working  group  about  six  months 
to  come  up  with  a  methodology 
for  classifying  data. 

Jim  Doustou,  technical  direc¬ 
tor  at  Cambridge,  Mass.-based 
storage  software  vendor  Per- 
mabit  Inc.,  is  involved  in  the 
SNIA’s  efforts.  He  said  that  once 
standards  are  established,  data 
classification  shouldn’t  be  an  ar¬ 
duous  task  for  users.  Generally, 
the  process  shouldn’t  take  more 
than  six  to  eight  weeks  per  line 
of  business,  he  said. 

”Do  not  do  this  as  a  big 
bang,”  Doustou  advised.  But,  he 
added,  “you  can’t  deploy  [ILM] 
technology  until  this  is  in  place.” 

-  Lucas  Mearian 


Continued  from  page  1 

ILM  Projects 

the  Storage  Networking  Indus¬ 
try  Association. 

Users  and  storage  vendors 
alike  agreed  that  most  ILM 
strategies  are  still  works  in 
progress.  In  addition  to  the  in¬ 
ternal  challenges  that  IT  man¬ 
agers  have  to  contend  with, 
ILM  standards  are  lacking,  at¬ 
tendees  said.  They  also  cited  a 
need  for  more  automated  data 
migration  capabilities  and  bet¬ 
ter  integration  between  appli¬ 
cations  and  storage  devices. 

But  the  sheer  volume  of  in¬ 
formation  makes  it  imperative 


Steps  for 
Creating  an  ILM 
Architecture: 

■  Consolidate  your  storage 
capacity  on  a  SAN. 

■  Classify  the  data  for  storage 
on  different  devices. 

■  Set  service-level  agreements 
for  end-user  access  to  data. 

■  Begin  using  automated 
policies  to  manage  data 
storage  and  migration. 

■  Enact  standard  storage  man¬ 
agement  practices  across 
your  company’s  operations. 


BY  MARC  L.  SONGINI 

Looking  to  penetrate  further 
into  the  software  infrastruc¬ 
ture  market,  SAP  AG  last  week 
announced  plans  to  add  new 
Java  and  business  intelligence 
capabilities  to  its  NetWeaver 
suite  of  middleware  and  appli¬ 
cation  integration  tools. 

At  its  SAP  TechEd  2004  de¬ 
veloper  conference  in  San 
Diego,  the  software  vendor 
said  it’s  building  technology 
into  NetWeaver  that’s  de¬ 
signed  to  boost  the  reliability 
of  Java-based  applications. 

The  so-called  container  tech¬ 
nology  uses  standard  Java  vir- 


that  companies  begin  classify¬ 
ing  data  and  managing  it  via 
automated  policies,  said  users 
such  as  Scott  McIntyre,  CIO  at 
Quantum  Corp.  in  San  Jose. 

The  need  to  comply  with 
the  Sarbanes-Oxley  Act  and 
other  regulations  “provides 
the  opportunity  for  us  to  blud¬ 
geon  our  business  units  to 
where  we  need  to  go”  with 
ILM,  McIntyre  said.  Quantum, 
which  makes  disk  and  tape 
drives,  is  moving  from  a  stor¬ 
age  approach  built  around  data 
warehousing  to  what  McIntyre 
described  as  an  information 
retention  model.  But,  he 
added,  the  company  is  “in  the 
early  stages”  of  the  project. 

The  potential  business  ram¬ 
ifications  of  not  adopting  ILM 
“are  absolutely  huge,”  said  Joel 
White,  lead  IT  architect  at  All¬ 
state  Insurance  Co.  in  North¬ 
brook,  Ill.  White  added  that 
Allstate’s  ILM  strategy  is 
twofold:  The  insurer  is  trying 
to  achieve  an  enterprisewide 
view  of  all  its  data  while  con¬ 
solidating  and  centralizing  its 
storage  infrastructure. 

Mike  Peterson,  an  analyst  at 
Strategic  Research  Corp.  in 
Santa  Barbara,  Calif.,  and  pro¬ 
gram  director  for  the  SNIA’s 
Data  Management  Forum,  said 
the  key  issues  driving  ILM 
adoption  include  an  inability 
to  effectively  manage  data  and 


tual  machine  code  and  pro¬ 
vides  a  lockdown  feature  that 
isolates  end  users  from  one 
another  in  order  to  prevent 
system  errors  from  having  a 
widespread  impact,  said  Peter 
Graf,  senior  vice  president  of 
collaborative  solutions  at  SAP. 

“What  it  means  from  a  user 
perspective  is  that  the  system 
doesn’t  crash,”  Graf  said. 
“We’ve  taken  the  reliability  of 
SAP  and  made  that  capability 
available  in  Java.” 

To  speed  access  to  data  for 
business  intelligence  uses, 
SAP  is  beefing  up  the  query¬ 
processing  capabilities  in  Net- 


a  desire  to  get  information  out 
of  the  silos  where  it  has  tradi¬ 
tionally  been  stored.  But  deal¬ 
ing  with  the  sheer  mass  of 
data  “is  really  an  ominous 
challenge  for  the  IT  group,” 
Peterson  said. 

Another  major  issue  identi¬ 
fied  by  conference  attendees 
was  the  need  to  keep  old  ap¬ 
plications  running  in  order  to 
access  and  read  archived  data. 


Weaver  by  adding  advanced 
storage  and  search  techniques, 
such  as  vertical  decomposi¬ 
tion,  horizontal  partitioning, 
smart  compression  and  in¬ 
memory  processing.  It  said  the 
new  features  are  aimed  at 
users  with  high  data  volumes, 
a  large  number  of  simultane¬ 
ous  data  requests  and  unpre¬ 
dictable  types  of  queries. 

The  Java  and  business  intel¬ 
ligence  upgrades  are  due  in  the 
next  version  of  the  NetWeaver 
platform,  which  is  scheduled 
for  release  next  year. 

SAP  also  introduced  an  up¬ 
grade  of  NetWeaver’s  Master 


Peter  Delle  Donne,  CEO  of 
Iron  Mountain  Inc.  in  Boston, 
said  the  archiving  services 
vendor  recertifies  older  busi¬ 
ness  applications  on  its  sys¬ 
tems  after  upgrades  to  ensure 
that  archived  data  can  still  be 
accessed.  Delle  Donne  added 
that  he  has  sometimes  been 
able  to  avoid  the  costly  prac¬ 
tice  by  saving  data  in  Portable 
Document  Format  files.  With 


Data  Management  module, 
available  immediately.  The 
company  said  it  plans  to  add  a 
global  data  synchronization 
tool  in  December  that’s  opti¬ 
mized  for  the  retail  and  con¬ 
sumer  products  industries. 

David  Dob rin,  an  analyst  at 
Cambridge,  Mass.-based  con¬ 
sultancy  B2B  Analysts  Inc., 
said  the  data  synchronization 
tool  is  “terribly  important”  for 
companies  that  plan  to  install 
supply  chain  systems  based  on 
radio  frequency  identification 
technology.  It  could  also  play  a 
big  role  in  inventory  manage¬ 
ment  applications,  he  said. 

SAP  has  many  consumer 
product  manufacturers  among 
its  user  base,  Dobrin  said,  so 
“anything  they  can  do  for  them 
in  this  area  will  be  welcomed 
as  a  step,  however  small,  in  the 
right  direction.”  O  49962 


PDFs,  “we  can  present  the  in¬ 
formation  for  a  long  period  of 
time,”  he  said. 

But  others  disagreed  that 
PDF  files  are  a  viable  means 
of  staving  off  business  appli¬ 
cation  upgrades  for  archived 
data. 

“PDF  is  not  the  answer,” 
said  Tom  McGuire,  director  of 
IT  at  a  large  pharmaceutical 
company.  “In  fact,  it’s  a  big 
problem.”  McGuire,  who 
asked  that  his  company  not  be 
identified,  noted  that  an  up¬ 
graded  version  of  PDF  soft¬ 
ware  he  purchased  last  year 
wouldn’t  access  data  archived 
in  an  earlier  format. 

Jim  Zhou,  a  senior  program¬ 
mer/analyst  in  the  IT  architec¬ 
ture  and  engineering  group  at 
Genentech  Inc.  in  South  San 
Francisco,  Calif.,  said  storage 
managers  need  to  convince 
their  company’s  business  units 
that  all  of  their  data  doesn’t 
have  to  be  stored  on  high-per¬ 
formance  disk  arrays. 

Storage  vendors  should  de¬ 
velop  standardized  proce¬ 
dures  for  IT  departments  to 
follow  in  classifying  data  and 
setting  service-level  agree¬ 
ments  with  business  units, 
Zhou  said.  He  added  that  busi¬ 
ness  managers  could  then 
choose  from  a  menu  of  ILM 
options.  ©  49929 


SAP  Beefs  Up  Java  Support 
Capabilities  for  NetWeaver 


MLB.com  knows  the  power  of  SAS®  software... 


Allan  H.  “Bud”  Selig,  Commissioner  of  Major  League  Baseball 
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at  SNW 

“Best  Practice”  Storage  Users 
to  Be  Announced  October  25th 
at  Storage  Networking  World 
Conference 


COMPUTERWORLD  ^ 
STORAGE  NETWORKING  WORLD 

Best  Practices 

IN  STORAGE 


Storage  Networking  World  (SNW),  in  conjunction  with  Computerworld 
and  the  Storage  Networking  Industry  Association  (SNIA), 
proudly  presents  the  fifth  SNW  “Best  Practices  in  Storage” 

Awards  Program.  This  program  honors  ten  IT  user  “best  practice” 
case  studies  selected  from  a  field  of  qualified  finalists. 


AWARDS  PROGRAM 


AWARDS  PROGRAM 
EXCLUSIVELY  SPONSORED  BY: 


EMC2 


Two  awards  will  be  presented  in  each  of  the  following  five  categories: 


where  information  lives 


Systems  Implementation _ 

Recognizes  the  successful  design,  implementation  and  management  of  an  interoperable  environment. 

This  category  also  demonstrates  the  ability  to  source  from  multiple  vendors. 

Storage  Reliability  and  Data  Recovery _ 

Acknowledges  implementation  strategies  and  programs  to  insure  highly  available  information  and  data  access. 


Data  Lifecycle  Management _ 

Exemplifies  solutions  and  processes  to  manage  the  information  over  its  lifecycle. 


Industry  Regulation  Compliance  and  Corporate  Governance _ 

Spotlights  solutions  being  deployed  to  meet  or  exceed  industry  regulations  specified  by  the  SEC,  Patriot  Act,  HIPAA, 
Sarbanes-Oxley,  DoD,  and  CFR. 


Innovation  and  Promise 


Successful  “pioneering"  of  leading/bleeding-edge  storage  networking  technology  will  be  recognized  in  this  category. 


"'T-snia 

COMPUTERWORLD 

STORAGE  NETWORKING  WORLD 

October  25-28,  2004  •  JW  Marriott  Grande  Lakes  Resort  •  Orlando,  FL 


For  information  on,  or  to  register  for 
Storage  Networking  World 
visit  www.snwusa.com 
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Coordination  Challenges 

The  report,  signed  by  DHS  In¬ 
spector  General  Clark  Kent 
Ervin,  notes  that  the  agency 
said  it  initially  lacked  the  re¬ 
sources  to  coordinate  the 
watch-list  work.  In  addition, 
the  DHS  faced  major  IT  chal¬ 
lenges,  including  the  need  to 
integrate  the  financial  systems 
of  its  22  member  agencies,  de¬ 
velop  a  departmentwide  IT  in¬ 
frastructure  and  create  an  in¬ 
formation  assurance  program. 

And  in  a  written  response  to 
the  inspector  general’s  report, 
Frank  Libutti,  the  DHS  under¬ 
secretary  for  information 
analysis  and  infrastructure 
protection,  said  he  strongly 
disagrees  that  the  agency  has 
the  lead  responsibility  for  con¬ 
solidating  the  watch-list  infor¬ 
mation  in  the  first  place. 

A  presidential  directive 
signed  in  September  2003 
stated  that  responsibility  for 
the  effort  would  rest  with  the 
U.S.  Department  of  Justice, 


said  the  disagreement  over 
responsibility  means  that  a 
consensus  will  have  to  be 
built  between  the  DHS  and 
DOJ  before  more  data-sharing 
improvements  can  be  made. 
“We  can’t  force  their  hand,” 


the  spokeswoman  said. 

DOJ  officials  didn’t  return 
calls  seeking  comment.  A 
spokesman  for  the  FBI,  which 
is  part  of  the  DOJ,  declined  to 
comment  about  the  inspector 
general’s  report.  O  49908 


BY  TODD  R.  WEISS 

The  U.S.  Department  of 
Homeland  Security  still  isn’t 
doing  enough  to  integrate  in¬ 
formation  that’s  stored  in  a 
dozen  terrorist  watch-list 
databases  maintained  by  nine 
federal  agencies,  according  to 
a  report  by  the  inspector  gen¬ 
eral  at  the  DHS. 

The  report,  which  was  is¬ 
sued  internally  in  August  and 
made  public  on  Oct.  1,  criti¬ 
cizes  the  DHS  for  “not  playing 
a  lead  role  in  consolidating  ter¬ 
rorist  watch-list  information” 
despite  the  fact  that  the  agency 
was  given  that  responsibility 
when  it  was  created  in  2002. 

The  formation  last  year  of 
two  interagency  organizations 
by  the  CIA  and  the  FBI  has 
helped  the  government  make 
progress  in  sharing  watch-list 
data  that’s  used  to  monitor  and 
apprehend  terrorists,  the  re¬ 
port  says.  But,  it  adds,  planning, 
budgeting  and  staffing  issues 
related  to  the  database  inte¬ 
gration  continue  to  be  handled 
on  an  ad  hoc  basis  because  of 
“the  lack  of  central  leadership 
and  oversight,”  which  the  DHS 
should  be  providing. 


Libutti  wrote.  He  went  on  to 
reject  the  report’s  recommen¬ 
dation  that  his  unit  set  up  an 
interagency  group  to  identify 


technology  and  resource 
needs  and  then  coordinate 
their  allocation. 

A  spokeswoman  for  Ervin 
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DON  TENNANT 


THORNTON  A.  MAY 


Handicapped  Thinking 


THREE  WEEKS  AGO  in  this  space,  I  men¬ 
tioned  that  I  had  a  signed  copy  of  Bill 
Gates’  book  Business  @  the  Speed  of 
Thought,  and  I  said  I’d  auction  it  off  to 
raise  money  for  The  ALS  Association. 
The  winning  bid  was  an  even  $100,  and  it  came  from 
Steve  Jenkins  of  the  M.D.  Anderson  Cancer  Center 


in  Houston.  I  know 
Steve’s  generosity  is 
greatly  appreciated  by 
the  association,  which  is 
dedicated  to  finding  a 
cure  for  ALS,  also  known 
as  Lou  Gehrig’s  disease, 
and  by  my  dad,  who  is 
one  of  its  victims. 

In  that  same  column,  I 
referred  to  the  proclivity 
of  “Linux  loonies”  to  re¬ 
ward  anyone  who  makes 
a  critical  comment  about 
Linux  with  a  barrage  of  hate  mail. 

In  fact,  I  was  speaking  from  experi¬ 
ence:  A  few  years  ago,  I  wrote  a 
tongue-in-cheek  column  in  which  I 
poked  fun  at  the  stupid  penguin  and 
at  the  absurd  cult  following  of  Linux 
creator  Linus  Torvalds.  And  sure 
enough,  I  received  dozens  of  ven¬ 
omous  e-mails  from  his  followers.  I 
remember  one  in  particular  that  said 
I  should  “burn  in  hell,”  and  another 
that  labeled  me  a  “Bill  Gates  love 
slave.”  In  fact,  a  common  theme  of 
these  folks  is  that  anyone  who  would 
dare  disparage  Linux  is  necessarily  a 
toady  of  Gates  and  Microsoft  —  for 
which  they  seem  to  have  an  irra¬ 
tional  and  disturbingly  intense 
loathing. 

Predictably,  the  e-mails  I  received 
from  the  Linux  crowd  following  my 
“loonies”  comment  chided  me  for 
expecting  anyone  to  be  interested  in 
a  book  written  by  Gates. 

“I  noticed  your  intent  to  auction 
off  your  autographed  copy  of  Busi¬ 
ness  @  the  Speed  of  Thought,”  one 
person  wrote.  “I  checked  Amazon, 
and  the  going  price  is  $0.01.  New 
copies  are  going  for  $0.98.  Since  your 


copy  is  signed  by  Gates, 
I’ll  bid  a  whole  dollar.” 
And,  he  continued,  “Seri¬ 
ously,  why  don’t  you  auc¬ 
tion  off  a  boxed  Linux 
[distribution]  like  Man¬ 
drake  or  SUSE  (the  least 
expensive  you  can  find) 
at  the  same  time.  If  you 
do,  I’ll  start  the  bidding 
at  $100.” 

That  theme  was 
echoed  by  another  corre¬ 
spondent:  “Well,  consid¬ 
ering  how  many  times  I’ve  had  to 
deal  with  Billy’s  products  and  virus¬ 
es,  clueless  tech  support,  blue 
screens  of  death,  security  holes, 
hackers  —  I  tell  ya  what,”  this  person 
wrote.  “You  give  me  20  bucks,  and 

I’ll  haul  it  to  the  dumpster  for  ya _ 

Anyone  that  thinks  I’d  actually  pay 
for  that  thing  is  . . .  just  a  fool.” 


What  these  people  just  don’t  seem 
to  get  is  that  they  don’t  need  to  be 
so  mindlessly  defensive  anymore. 
Linux  is  no  longer  just  the  operating 
system  of  choice  for  a  band  of  free- 
spirited,  defiant  techno-geeks.  It’s 
the  operating  system  of  choice  for 
a  growing  number  of  Fortune  500 
companies  that  are  using  it  to  run 
critical,  enterprisewide  applications. 
So  these  sorts  of  rants  bespeak  an 
outdated  mentality  that  can  only 
handicap  Linux’s  adoption  by  per¬ 
petuating  the  impression  of  its  im¬ 
maturity. 

What’s  especially  harmful  is  that 
it  tends  to  be  a  mentality  of  intoler¬ 
ance.  After  I  thanked  that  second 
correspondent  for  taking  the  time  to 
write,  he  sent  me  this  reply:  “That 
wasn’t  a  joke.  I’ve  been  regularly  as¬ 
tounded  that  people  accept  this  poor- 
quality  software  as  much  as  they  do. 
Heck,  if  I  had  cranked  out  this  kinda 
crap  when  I  was  a  junior  program¬ 
mer,  I’d  be  an  auto  mechanic  now!” 

I  wonder.  I’ve  known  some  bril¬ 
liant,  dedicated  auto  mechanics.  Like 
my  dad,  for  one.  ©  49904 


don  tennant  is  editor  in 
chief  of  Computerworld. 
You  can  contact  him  at 

don.tennant® 
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The  Why  and 
What  oi  the 
CFO  for  IT 

FRANKLIN  ROOSEVELT’S 
last  written  words  from 
Warm  Springs,  Ga.,  in  the 
spring  of  1945  counseled  global 
leaders  and  ordinary  citizens 
alike  on  the  need  “to  cultivate 

the  science  of  human  relationships.” 

On  the  IT  scene,  a  new  player,  the  CFO 
for  IT,  is  playing  a  huge  role  in  this 
area,  bridging  the  very  significant  gap 
between  the  internal  IT  and  financial 
camps  (see  “The  Number  Crunchers,” 
page  37). 

I’ll  discuss  what  a 
CFO  for  IT  does,  but 
first,  let’s  look  at  the 
state  of  this  relation¬ 
ship.  Data  collected 
over  three  days  from 
300-plus  CFOs  at¬ 
tending  the  IT  Lead¬ 
ership  Academy, 
sponsored  by  Law- 
son  Software,  unam¬ 
biguously  demon¬ 
strates  that  IT  lead¬ 
ers  and  finance  pro¬ 
fessionals  need  to  work  much  harder  to 
get  on  the  same  page.  Here’s  some  of 
what  we  learned  from  the  CFOs: 


WHAT  IS  YOUR  HUMAN  RELATIONSHIP 
WITH  IT  LEADERS? 


“My  best  friends.” 

12% 

“Trusted  colleagues.” 

29% 

“Business  colleagues,  no  more,  no  less.”  35% 

“People  1  worry  about.” 

18% 

“Enemies.” 

6% 

WHAT  IS  YOUR  BUSINESS  RELATIONSHIP 
WITH  YOUR  COMPANY’S  CIO? 

"We’re  joined  at  the  hip.  We  are  so  synchronized, 
we  almost  finish  each  other’s  sentences.”  0% 

“On  the  big  things,  we  pretty  much  agree.”  50% 

“There  are  a  few  spots  where  we 

agree  to  disagree.”  39% 

“We  are  constantly  arguing.”  6% 

“Sometimes  I  think  the  guy  is  from  Mars.”  5% 


HOW  OFTEN  DO  YOU  AND  IT  LEADERS  MEET 
PHYSICALLY  TO  TALK  ABOUT  COMMON  ISSUES? 

Every  day  16% 
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Every  week  37% 

Every  month  36% 

Every  quarter  11% 


HOW  LONG  HAVE  YOU  WORKED 
WITH  THE  CURRENT  CIO? 

Less  than  10  years  12% 

Less  than  five  years  46% 

Less  than  two  years  24% 

Less  than  a  year  18% 


DO  IT  LEADERS  SPEAK  THE 
LANGUAGE  OF  BUSINESS? 

Ruently  28% 

Passably  55% 

Mute  17% 


DO  FINANCIAL  LEADERS  SPEAK  THE 
LANGUAGE  OF  TECHNOLOGY? 

Ruently  5% 

Passably  55% 

Mute  40% 


Since  the  term  chief  information  offi¬ 
cer  first  appeared  in  1987  (in  William  R. 
Synott’s  book  The  Information  Weapon), 
the  chieftains  of  the  technology  and  fi¬ 
nance  tribes  have  mostly  operated  in  a 
world  of  antagonism  and  limited  un¬ 
derstanding  of  each  other’s  roles. 

A  detailed  analysis  of  organizations 
that  extract  the  highest  value  from  IT 
investments  today  reveals  three  com¬ 
mon  traits: 

■  A  good  working  relationship  be¬ 
tween  IT  and  finance. 

■  A  well-managed,  highly  interac¬ 
tive,  real-time  and  reasonably  trans¬ 
parent  IT  investment  process. 

■  The  presence  of  a  tribal  go- 
between  —  frequently  referred  to 
as  the  CFO  for  IT. 

What  do  CFOs  for  IT  do? 

They  report  to  the  CFO  but  work 
for  the  CIO.  They  put  together  the 
numbers  for  IT.  They  manage  IT’s 
assets.  They  work  with  their  col¬ 
leagues  in  the  finance  department  to 
make  financial  decisions  (such  as 
which  depreciation  schedules  to  use 
and  whether  to  lease  or  buy  equip¬ 
ment).  They  maintain  high-trust  back- 
channel  relations  with  executives  in 
the  finance  department.  They  manage 
procurement.  They  manage  the  con¬ 
tractual  side  of  the  relationship  with 
vendors,  including  auditing  vendor 
performance.  They  establish  common 
language  and  methods  for  identifying 
benefits  of  IT  investments.  They  man¬ 
age  benchmark  studies  and  IT  perfor¬ 
mance  information. 

The  CFO  for  IT  will  play  a  big  part 
in  the  future  of  IT.  ©  49875 


PIMM  FOX 

Public  Net 
Connections 
Put  at  Risk 

AS  WE  HEAD  into  the 
home  stretch  of  the 
presidential  election, 
consider  this  snafu:  Money  to 
support  high-speed  Internet 

and  telephone  service  in  public  li¬ 
braries  and  schools,  as  mandated  by 
the  Telecommunications  Act  of  1996,  is 
being  tied  up  in  the  type  of  red  tape 
that  would  make  a  Christmas  present 
impossible  to  open.  About  $1  billion 
that  schools  and  libraries  were  expect¬ 
ing  from  the  E-Rate  program  to  help 
pay  the  bills  for  Internet  and  telephone 
service  won’t  be  arriving  anytime  soon. 

Why?  Because  of  a  bureaucratic  col¬ 
lision  between  the  E-Rate  program  and 
the  Anti-Deficiency  Act,  which  is  de¬ 
signed  to  enforce  rigorous  accounting 
methods  for  federal  programs.  The 
E-Rate  program  typically  makes  finan¬ 
cial  pledges  to  schools  and  libraries 
that  are  greater  than  what  is  in  its  bud¬ 
get.  Program  managers  say  this  isn’t  a 
problem  because  the  schools  and  li¬ 
braries  spend  less  than  80%  of  the 
money  they  request.  But  the  Anti-Defi¬ 
ciency  Act  says  this  isn’t  the  right  way 
to  run  a  government  program,  and 


Michael  K.  Powell,  chairman  of  the 
Federal  Communications  Commission, 
isn’t  going  to  rock  the  boat  on  this  one. 
He  was  reported  as  saying  that  any 
funding  delays  are  temporary  while  he 
gets  the  program  on  a  more  solid  foot¬ 
ing.  That  sounds  nice,  but  why  then 
did  the  FCC  reduce  the  level  of  phone 
company  contributions  to  the  E-Rate 
program  by  $550  million? 

The  FCC  says  it  did  this  because  the 
nonprofit  Universal  Service  Adminis¬ 
trative  Co.  (USAC),  which 
runs  the  program,  appeared 
to  have  too  much  cash  on 
the  books,  and  that  didn’t 
look  good. 

The  FCC  and  the  White 
House  have  had  a  couple 
of  years  to  work  this  out. 

Where  is  the  education 
president  on  this? 

Anne  L.  Bryant,  a  board 
member  of  USAC,  says  it’s 
more  than  policy  —  it’s  pol¬ 
itics.  She’s  been  quoted  as 
saying  that  “there  was  a  lot  of  pressure 
to  keep  the  [phone  company]  contribu¬ 
tion  factor  down  until  the  election 
passes,  after  which  it  will  then  have 
to  rise  again.”  And  when  it  does,  you 
can  expect  the  cost  to  be  passed  on  to 
consumers. 

But  in  the  meantime,  some  states 
have  signaled  that  the  lack  of  funding 
could  shut  down  services  for  students 
and  public  libraries. 

Does  this  make  sense? 

Not  to  me. 

It  doesn’t  make  sense  to  put  stu¬ 
dents  and  library  visitors  at  a  disad¬ 


vantage  because  a  bunch  of  politicians 
in  Washington  want  to  strangle  a  piece 
of  legislation  that  is  already  law. 

But  this  shouldn’t  come  as  a  sur¬ 
prise.  Politicians  attack  legislation  they 
don’t  like  with  delays  and  obfuscation. 

After  all,  students  don’t  vote.  And, 
heck,  who  goes  to  the  library?  Only 
those  who  don’t  have  lots  of  money  to 
spend  on  books  and  Internet  access  — 
or  on  political  contributions. 

Our  priorities  are  screwed  up  if  we 
don’t  see  the  urgency  in 
spending  money  each  year 
to  make  sure  schools  and 
libraries  have  the  funds  to 
stay  connected. 

By  creating  the  delay,  the 
White  House  and  FCC  are 
igniting  three  problems. 

The  first  is  that,  given 
the  inertia  of  the  federal 
government,  commitments 
already  made  —  about 
$1  billion  —  won’t  be  met. 
The  second  is  that 
putting  off  the  spending  means  having 
to  spend  more  in  subsequent  quarters. 

And  finally,  the  worst  problem  of 
them  all:  Government  small-minded¬ 
ness  is  hurting  a  group  of  U.S.  citizens 
in  a  way  that  shuts  them  out  of  the  In¬ 
ternet  and  prevents  equal  access  to  in¬ 
formation  and  opportunity.  And  peo¬ 
ple  wonder  why  politics  is  a  dirty 
word.  ©  49838 
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READERS’  LETTERS 


In  Praise  of  Change 

The  story  detailing  Paul  In- 
gevaldson’s  “IT  Survival  Guide" 
[QuickLink  48479]  was  a  well-done 
piece.  I  enjoyed  reading  about  a  fel¬ 
low  CIO  who  is  moving  on  to  the 
next  phase  of  life  by  choice. 

John  Townsend 
Carlsbad,  Calif. 


One  More  Loophole 
In  Data  Destruction 

IT  MIGHT  BE  USEFUL  to  add  anoth¬ 
er  caveat  to  the  matters  addressed 
in  Frank  Hayes'  column  of  Aug.  30 
[“Shred,  Burn,  Erase,"  QuickLink 
49071],  Users,  especially  develop¬ 
ers  and  other  techies,  often  main¬ 
tain  personal  backups  of  whatever 
they’re  working  on  and,  often,  any¬ 


thing  they’ve  ever  worked  on.  Why 
would  they  do  so  if  it  violates  com¬ 
pany  security  policy?  Because 
they’ve  been  burned  by  lost  data.  As 
a  practical  matter,  this  risk  exceeds 
by  at  least  an  order  of  magnitude 
the  risk  of  data  theft.  Naturally, 
when  users  make  personal  back¬ 
ups,  informal  copies  will  appear  on 
workstation  drives,  CDs,  DVDs  and 
all  of  the  other  kinds  of  media  on  the 
employee’s  home  computer.  Of 
course,  not  all  of  the  copies  are  re¬ 
membered  when  it’s  time  to  clean 
house  or  move  on  to  another  em¬ 
ployer.  You  can’t  avoid  this  tenden¬ 
cy  of  employees  entirely,  but  the 
reasonable  among  them  will  be  far 
more  likely  to  comply  if  a)  the  firm 
backs  up  their  work  in  a  regular,  dili¬ 
gent  and  disciplined  manner; 
b)  the  backups  are  frequently  test- 


restored:  and  c)  the  employees  are 
made  entirely  aware  of  a)  and  b). 

Where  a  firm  allows  work  to  be 
done  from  home,  it  might  be  reason¬ 
able  for  it  to  provide  or  subsidize  ma¬ 
chines  that  connect  to  the  VPN. 

Then  it  might  reasonably  request 
staff  to  present  these  dedicated  ma¬ 
chines  for  maintenance  at  periodic 
intervals  or  at  separation. 

Larry  Brunelle 
Allen,  Texas 


Value  Experience 

HEAR!  HEAR!  to  this  statement: 

“Smart  companies  are  enticing 
their  older,  wiser  IT  workers  to  re¬ 
main  on  the  job  a  little  bit  longer" 

[“  Staying  Power,”  QuickLink  48720]. 
Most  CEOs  are  fattening  their  wal¬ 
lets  with  the  so-called  cost  savings 


found  in  offshoring.  But  retaining 
the  individuals  who  wrote  your  sys¬ 
tems  and  have  key  business  knowl¬ 
edge  is  invaluable. 

Tim  Albrecht 
DBA,  Wachovia  Bank, 
Winston-Salem,  N.C. 

C0MPUTERW0RLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to 
Jamie  Eckle,  letters  editor,  Com- 
puterworld,  P0  Box  9171, 1  Speen 
Street,  Framingham,  Mass.  01701. 
Fax:  (508)  879-4843.  E-mail: 
letters@cornputerworld.com. 
Include  an  address  and  phone 
number  for  immediate  verification. 

OFor  more  letters  on  these  and 
other  topics,  go  to 

www.computerworld.com/ietters 


pimm  fox  is  a  London 
based  journalist. 


Contact  him  at 

pimmfox@pacbcll.net. 


Middleware  is  Everywhere 


Can  you  see  it? 
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\  1  Key 

MIDDLEWARE  IS  IBM  SOFTWARE.  Identity  management 
software  that  uses  single  sign-on  technology  to  ensure  that 
the  right  access  is  given  to  the  right  people.  Open,  modular 
Tivoli  security  software  that  automates  processes  between 
employees,  partners,  customers  and  suppliers  -  while 
helping  to  reduce  costs.  It’s  how  everyone  involved 
gets  the  information  they  need.  On  time.  And  on  demand. 

1.  Buyer  downloads  competitive  pricing. 

2.  Manager  securely  retrieves  invoices. 
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Express  Delivery 

Integrated  appliances  offer  a 
range  of  technologies  to  im¬ 
prove  the  speed  and  security 
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Grazing  the  Nanograss 
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grass  may  put  a  zoom  lens  in  your  cell  phone.  Bell  Labs’ 
David  Bishop  (right)  holds  a  chip  with  256  nanograss 
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Though  federated  identity  management  tech¬ 
nologies  promise  improved  access  to  networks 
and  cost  savings,  issues  of  trust  and  interoper¬ 
ability  slow  adoption.  BY  JAIKUMAR  VI JAYAN 

EXTENDING 

Identity 


The  reduced  identity  admin¬ 
istration  costs,  improved  ac¬ 
cess  to  cross-organizational 
applications  and  better  secu¬ 
rity  promised  by  federated  identity 
management  systems  are  finally  be¬ 
ginning  to  drive  corporate  interest, 
say  proponents  of  the  technology. 

But  organizational  trust  concerns 
and  nagging  interoperability  prob¬ 
lems  continue  to  pose  big  chal¬ 
lenges. 

“Identity  federation  has  been 
talked  about  for  some  time,  but  it  is 
only  now  that  we  are  really  seeing  a 
number  of  customers  showing  inter¬ 
est  in  it,”  says  Jason  Lewis,  vice  presi¬ 
dent  of  product  management  at  RSA 
Security  Inc.  in  Bedford,  Mass. 

“The  main  reason  why  users  are 
looking  at  federated  ID  management 
is  to  make  it  easier  to  do  business  on¬ 
line  for  their  customers,  business 
partners  and  their  employees,”  he  says. 

Identity  federation  allows  users  to 
present  a  single  set  of  identity  and 
authentication  information  to  access 
applications  and  services  across  multi¬ 
ple  domains  and  distributed,  heteroge¬ 
nous  networks.  A  federated  system 
allows  a  user’s  identity  in  one  domain 
to  be  used  to  gain  access  to  resources 
in  another  domain  without  the  need 
for  separate  authentication. 

Federated  identity  projects  enable 
single  sign-on  to  cross-organizational 
resources,  while 
other  identity 
management 
systems  focus 
on  improving  in¬ 
ternal  access  to 
resources. 

One  company  that’s  implementing 
cross-domain  authentication  is  insur¬ 
ance  provider  Nationwide  Financial 
Services  Inc.,  which  recently  deployed 
a  federated  identity  system  using  tech¬ 
nology  from  RSA  Security. 

The  system  lets  thousands  of  Na¬ 
tionwide  insurance  agents  and  brokers 
go  to  a  central  portal  site  where  they 
can  access  the  Columbus,  Ohio-based 
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SECURITY  MANAGER’S  JOURNAL 

Security  Review  Uncovers 
Rampant  Virus  Infections 

“C.J.  Kelly,”  our  new  journal  writer,  finds 
that  she  has  a  big  problem  just  as  the  IT 
auditors  are  scheduled  to  arrive.  Page  32 


company’s  applications  as  well  as  ap¬ 
plications  hosted  on  sites  belonging 
to  some  of  its  partners. 

Previously,  Nationwide’s  agents 
needed  to  create  separate  accounts 
and  passwords  with  the  third  parties 
to  access  their  applications.  The  part¬ 
ners,  in  turn,  needed  to  maintain  their 
own  lists  of  usernames  and  passwords 
for  Nationwide’s  agents. 

With  identity  federation,  the  agents 
have  to  authenticate  themselves  only 
once  on  the  central  Nationwide  portal 
and  simply  click  on  the  appropriate 
links  to  access  applications  on  the 
partner  sites. 

RSA’s  Federated  ID  Manager  tech¬ 
nology  intercepts  an  agent’s  request 
with  his  log-in  information.  It  gener¬ 
ates  an  encrypted  Security  Assertion 
Markup  Language  (SAML)  message 
containing  the  user’s  identity  profile 
and  other  authentication  information 
that  the  partner  needs  in  order  to  let 
the  user  access  its  applications. 

The  SAML  assertion  and  the  brows¬ 
er  session  are  then  directed  to  the 
partner’s  site,  where  another  federa¬ 
tion  server  or  agent  parses  the  pack¬ 
aged  identity  information  and  uses  it 
to  grant  access  to  the  application  the 
agent  wanted. 

Such  cross-domain  identity  asser¬ 
tion  can  yield  multiple  benefits,  says 
Daniel  Blum,  an  analyst  at  Burton 
Group  in  Midvale,  Utah. 

“There  are  many  different  use  cases 
for  federation  in  the  business-to-busi- 
ness,  business-to-employee  and  busi- 
ness-to-consumer  [areas],”  Blum  says. 
For  example,  an  organization  might 
federate  identities  to  provide  employ¬ 
ees  with  access  to  benefits  informa¬ 
tion,  enable  better  information  access 
to  business  partners  or  deliver  more 
integrated  services  to  consumers. 

Federation  can  also  improve  securi¬ 
ty.  For  example,  since  identity  informa¬ 
tion  is  centrally  administered  and 
managed,  it  becomes  easier  for  compa¬ 
nies  to  deprovision  access  to  federated 
resources  when  an  employee  leaves  a 
company  or  is  terminated. 
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Such  benefits  have  convinced  a 
small  but  growing  number  of  compa¬ 
nies  to  implement  federated  identity 
management  systems. 

®  Harvard  Pilgrim  Health  Care  Inc. 
is  using  a  federated  identity  model  to 
present  members  with  claims  informa¬ 
tion  from  a  partner  site.  The  health 
care  organization  has  deployed  tech¬ 
nology  from  Waltham,  Mass.-based 
Netegrity  Inc.  that  allows  it  to  take  a 
member’s  identity  information  and 
assert  it  on  the  claims  presentation 
partner’s  Web  site.  The  ability  to  deliv¬ 
er  such  access  via  a  federated  portal  is 
a  crucial  competitive  advantage,  says 
Ken  Patterson,  information  security  of¬ 
ficer  at  Wellesley,  Mass.-based  HPHC. 

■  For  the  U.S.  Navy,  identity  federa¬ 
tion  is  a  core  enabler  in  a  massive  ID 
management  project  designed  to  make 
it  easier  for  over  800,000  ship-  and 
land-based  naval  personnel  to  access 
thousands  of  scattered  applications  us¬ 
ing  a  single  sign-on.  When  complete, 
the  system  will  allow  a  sailor  or  ma¬ 
rine  to  use  a  single,  unique  Naval  Net¬ 
work  Identity  to  access  scores  of  appli¬ 
cations  and  network  services.  Previ¬ 
ously,  users  had  to  maintain  dozens  of 
usernames  and  passwords  to  access 
these  different  resources,  says  Terry 
Howell,  enterprise  services  lead  at 
the  program  executive  office  for  the 
Navy’s  Command,  Control,  Communi¬ 
cations,  Computers  and  Intelligence 
project  at  the  Space  and  Naval  Warfare 
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systems  center  in  San  Diego.  Cuperti¬ 
no,  Calif. -based  Oblix  Inc.  is  providing 
the  Navy  with  the  federated  SAML  au¬ 
thentication  technology  that  is  needed 
to  assert  identities  across  domains. 

■  Southwest  Airlines  Co.  has  de¬ 
ployed  Oblix’s  NetPoint  access  control 
and  ID  management  technology  to 
broker  access  to  Southwest’s  external 
business  partners.  In  one  example, 
Southwest  is  using  the  SAML-enabled 
identity  management  system  to  vouch 
for  the  identity  of  employees  accessing 
repair  manuals  that  are  hosted  on  The 
Boeing  Co.’s  systems. 

Slowly  Gaining  Traction 

Though  adoption  of  the  federated 
model  is  growing,  the  number  of  im¬ 
plementations  so  far  is  still  relatively 
small,  Blum  says.  “We  estimate  there’s 
between  200  to  300  deployments  of 
federated  identity  today,”  he  says.  “The 
greatest  interest  is  in  the  financial  ser¬ 
vices  sector,  with  significant  interest 
also  in  manufacturing,  government 
and  telecommunications.” 

Most  of  the  activity  has  been  in  large 
companies  that  are  using  identity  fed¬ 
eration  to  link  networks  with  sub¬ 
sidiaries,  widely  dispersed  internal 
business  units  and  partners  with  whom 
they  have  trusted  relationships,  says 
Venkat  Raghavan,  security  manager  of 
IBM’s  Tivoli  Software  business  unit. 

Raghavan  sees  the  growing  use  of 
mobile  technologies  and  the  attempt 
by  wireless  providers  to  deliver  more 
services  to  handhelds  as  another  dri¬ 
ver  of  identity  federation.  Being  able 
to  use  next-generation  mobile  devices 
to  pay  multiple  bills  or  access  peer-to- 
peer  applications  will  require  identity 
federation  to  play  a  big  role,  he  says. 

Despite  the  growing  interest,  there 
are  several  formidable  challenges  that 
companies  need  to  consider  when 
thinking  about  deploying  federated 
identity  systems,  he  says. 

The  biggest  by  far  is  trust,  Raghavan 
says.  Partners  in  a  federated  system  are 
essentially  vouching  for  the  identity  of 
their  users  and  their  need  to  have  ac¬ 
cess  to  services  on  another  network. 

Before  a  federated  system  can  be  set 
up,  many  issues  must  be  sorted  out  re¬ 
lating  to  the  roles,  privileges  and  ac¬ 
cess  rights  for  individuals  on  partner 
networks.  There  also  needs  to  be  a 
high  level  of  assurance  around  the  pro¬ 
cedures  and  policies  that  federated 
partners  employ  for  authenticating 
users  and  assigning  roles  to  them. 

“There  is  no  warm,  fuzzy  feeling 
around  the  validation  of  an  individual 
whose  account  you  have  no  control 
over,”  says  HPHC’s  Patterson.  “We  are 
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haven't  always  interoperated  easily  with  one 
another  in  a  federated  network,  says  Dan 
Blum,  a  Burton  Group  analyst.  “Interoper¬ 
ability  is  a  problem,”  he  says.  "But  there  are 
some  initiatives  going  on  in  the  industry 
which  are  starting  to  ease  the  situation.” 

Among  the  more  notable  ones  are  the 
Liberty  Alliance’s  conformance  tests,  which 
have  been  going  on  for  over  a  year.  Under 
the  initiative,  the  alliance  is  validating  inter¬ 
operability  of  different  vendor  implementa¬ 


tions  of  its  federation  specifications. 

In  another  effort,  several  vendors  are 
working  with  the  U.S.  General  Services  Ad¬ 
ministration  on  the  E-Gov  E-Authentication 
initiative  to  demonstrate  interoperability  ot 
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operability  tests  and  have  been  approved 
for  use  by  federal  agencies  in  implementing 
E” Authentication.  The  vendors  include 
IBM,  Oblix,  RSA  Security,  Entrust  Inc. 
and  Hewlett-Packard  Co. 

Similar  testing  will  be  needed  on  another 
emerging  standard  called  the  Web  Services 
Federation  Language,  a  specification  for 
sharing  digital  identities,  Blum  says.  The 
companies  involved  in  that  effort  include 
IBM,  Microsoft  Corp.,  Netegrity,  Ping  Identi¬ 
ty  Corp.  and  RSA, 

“The  key  thing  is  for  a  user  not  to  get 
bogged  down  with  one  or  two  vendors,” 
says  Venkat  Raghavan,  security 
at  IBM's  Tivoli  Software  unit. 

“A  [user]  company  cannot  say,  'I  only 
want  to  use  Liberty  or  only  want  to  use 
SAML,’  ”  says  Raghavan.  In  a  federated  net¬ 
work.  users  must  be  able  to  share  identity 
information  using  multiple  products  and 
protocols,  he  adds. 

-JaikumarVijayan 


dealing  with  the  most  sensitive  med¬ 
ical  information.  We  want  to  have  the 
highest  level  of  assurance  around  the 
identity  of  our  users,”  he  says. 

“It  is  really  difficult  to  trust  a  net¬ 
work  outside  of  what  you  control,”  says 
the  Navy’s  Howell.  “The  negative  con¬ 
sequences  of  an  [identity-related  secu¬ 
rity  breach]  could  be  quite  drastic.” 

As  a  result,  identity  federation 
works  best  where  the  business  model 
is  built  on  interaction  between  differ¬ 
ent  companies  and  domains,  says  Rick 
Caccia,  director  of  product  manage¬ 
ment  at  Oblix.  When  legal  and  trust 
processes  are  already  in  place,  cross¬ 
domain  user  authentication  becomes 
easier  to  accept,  Caccia  says. 

Interoperability  is  another  key  issue, 
since  identity  federation  involves  the 
exchange  of  security  information 
across  different  domains  and  servers. 
The  most  widely  used  standard  for 
doing  this  today  is  SAML.  Another 
standard  is  the  Liberty  Alliance  Proj¬ 
ect’s  Identity  Federation  Framework. 
Both  standards  specify  the  manner  in 
which  organizations  package  and  en¬ 
crypt  the  identity  information  they 
share  with  one  another. 


But  different  versions  of  the  specifi¬ 
cations,  and  the  ways  in  which  vendors 
of  federated  identity  management 
products  have  chosen  to  implement 
these  standards,  can  create  interoper¬ 
ability  problems,  Blum  says. 

Organizations  that  are  embarking  on 
identity  federation  projects  also  need 
to  figure  out  a  way  to  bring  partners 
on  board,  says  RSA’s  Lewis.  Unless  you 
make  it  as  easy  and  cost-effective  as 
possible,  there  is  little  incentive  for 
partners  —  especially  the  smaller  ones 
—  to  link  into  a  federated  identity  sys¬ 
tem,  he  says. 

At  the  end  of  the  day,  federation  just 
makes  cross-organizational  access  eas¬ 
ier,  Raghavan  says.  For  example,  an 
employee  who  previously  needed  to 
separately  log  in  and  authenticate  him¬ 
self  on  his  401(k)  provider’s  site  might 
no  longer  need  to  do  so  if  he’s  already 
logged  in  on  his  employer’s  human  re¬ 
sources  site. 

But  federated  identity  doesn’t  enable 
new  access  where  none  existed  before, 
Raghavan  says.  Therefore,  it  becomes 
crucial  to  have  a  clear  understanding 
of  the  specific  cost,  access  and  security 
value  it  can  deliver,  he  says.  ©  49695 
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Web-enabled  application 
delivery  appliances  combine 
several  technologies  to  en¬ 
sure  fast,  secure  and  reliable 
access  to  Web  applications. 

BY  MATT  HAMBLEN 
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HARTONE  INC.  had  invested 
heavily  in  a  new  Web- 
enabled  application,  only  to 
discover  that  it  reached  end 
users  too  slowly.  “We  were 
having  challenges  running 
PeopleSoft  efficiently,”  says  Henry 
Svendblad,  director  of  IT  and  informa¬ 
tion  systems  at  the  San  Jose-based 
company,  which  provides  technology 
services  to  health  care  institutions. 

“The  advice  from  vendors  and 
integrators  was  to  tune  the  application 
or  the  database  or  add  more  server 
hardware,”  Svendblad  says.  But  he 
tried  a  different  approach,  spending 
$100,000  on  four  E|X  3250  Enterprise 
Application  Processor  appliances 


from  Campbell,  Calif.-based  Redline 
Networks  Inc. 

By  taking  advantage  of  features  such 
as  traffic  compression,  load  balancing, 
session  management  and  TCP  opti¬ 
mization  capabilities  available  in  the 
devices,  Svendblad  says  ChartOne  has 
improved  the  performance  of  People- 
Soft  and  all  of  its  other  Web  applica¬ 
tions  as  well.  “We  see  on  average  a  70% 
reduction  in  bandwidth.  It  makes  a 
night-and-day  difference  in  the  way  ap¬ 
plications  go,  from  being  very  slow  to 
snappy  and  very  responsive,”  he  says. 

All  in  One 

Vendors  have  traditionally  offered  an 
array  of  products  —  from  Secure  Sock¬ 
ets  Layer  (SSL)  acceleration  appliances 
to  Web  server  load  balancers  —  to  en¬ 
sure  fast,  reliable  and  secure  delivery 
of  Web-based  applications.  With  prod¬ 
ucts  such  as  the  E|X  3250,  those  tech¬ 
nologies  are  beginning  to  converge 
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into  consolidated  offerings.  A  half- 
billion-dollar  market  has  emerged 
for  products  from  more  than  a  dozen 
vendors  that  integrate,  usually  in  a 
single  switchlike  appliance,  a  range 
of  functions  designed  to  improve  the 
speed  and  security  of  Web-enabled 
applications. 

The  products,  variously  referred  to 
as  Web-enabled  application  delivery, 
Layers  4-7  switching  or  application 
front-end  appliances,  may  support  a 
variety  of  functions.  Among  them  are 
SSL  encryption  and  acceleration,  com¬ 
pression,  load  balancing,  route  opti¬ 
mization  and  control,  XML  optimiza¬ 
tion,  attack-signature  filtering,  TCP 
offloading  and  optimization,  and  appli¬ 
cation  performance  optimization.  The 
core  functions  most  large  businesses 
want  are  compression,  TCP  optimiza¬ 
tion  and  offloading,  and  SSL  accelera¬ 
tion,  says  Lynn  Nye,  an  analyst  at  APM 
Advisors  in  Portland,  Ore. 

IT  organizations  say  they’re  attract¬ 
ed  to  consolidated  devices  because 
they  require  less  data  center  space, 
lessen  setup  and  management  head¬ 
aches  and  save  money  by  reducing  the 
need  to  add  hardware  and  bandwidth. 

The  leading  players  in  this  niche  are 
smaller  companies,  says  Mark  Fabbi, 
an  analyst  at  Gartner  Inc.  In  contrast, 
major  network  switch  vendors  such  as 
Cisco  Systems  Inc.,  Nortel  Networks 
Ltd.  and  Foundry  Networks  Inc.  offer 
load  balancing,  but  they’ve  mostly 
omitted  the  other  optimization  features 
needed  to  ensure  speedy  Web  applica¬ 
tion  delivery.  “The  big  guys  don’t  get 
it,”  Fabbi  says. 

Yet  the  need  for  such  products  is  real. 
“Companies  spend  a  lot  of  money  on 
expensive  applications  and  find  the  net¬ 
work  performance  is  lacking,”  he  says. 
“You  can  spend  $10  million  for  a  criti¬ 
cal  application,  and  the  performance  to 
remote  users  doesn’t  work  well.” 

Gradual  Rollout 

ChartOne’s  main  goal  in  using  the  E|X 
3250  was  to  reduce  bandwidth  by  using 
its  compression  capabilities,  but 
Svendblad  decided  to  use  several  other 
features  as  well.  ChartOne’s  experi¬ 
ence  is  similar  to  that  of  other  users 
interviewed  for  this  story,  all  of  whom 
say  their  primary  concern  was  to  im¬ 
prove  performance. 

“Typically,  customers  buy  the  appli¬ 
ance  for  one  function  and  turn  on  oth¬ 
er  functions  as  time  goes  on,”  says  Nye. 

UBid  Inc.,  an  online  auction  provider 
in  Chicago,  started  using  the  NetScaler 
9000,  an  appliance  from  NetScaler  Inc. 
in  San  Jose,  last  March.  It  deployed 
the  device  to  provide  load  balancing 


across  the  company’s  Web  servers  but 
quickly  deployed  other  features,  says 
Mano  Sivashanmugam,  vice  president 
of  technology. 

UBid’s  Web  site  allows  simultaneous 
bids  from  hundreds  of  users  but  pre¬ 
vents  them  from  seeing  the  Final  bid 
price  to  protect  retailers.  Some  users, 
however,  had  written  scripts  to 
discover  the  Final  price,  he  says.  The 
NetScaler  appliance  prevents  such 
scripting  attacks  from  succeeding. 

UBid  had  30  Web  servers  before 
installing  NetScaler,  but  by  using  its 
load-balancing  features,  UBid  was  able 
to  reduce  that  to  just  eight.  Sivashan¬ 
mugam  bought  two  appliances  for 
about  $60,000  but  says  he  has  saved  up 


to  $80,000  on  new  hardware  he  didn’t 
have  to  buy,  as  well  as  up  to  $10,000  per 
month  for  additional  electrical  power 
and  bandwidth  that  won’t  be  needed. 

“My  cost  of  ownership  is  less,  host¬ 
ing  is  less,  power  is  less,  and  band¬ 
width  is  a  lot  less,”  Sivashanmugam 
says.  In  all,  bandwidth  needs  have 
dropped  from  35Mbit/sec.  to  17Mbit/ 
sec.,  he  estimates. 

NetScaler’s  SSL  acceleration  capabil¬ 
ity  also  has  made  UBid  more  efficient, 
Sivashanmugam  explains.  SSL  puts  a 
strain  on  Web  servers.  As  a  result  of 
offloading  encryption  and  decryption 
tasks  to  the  NetScaler  appliance,  the 
Web  server  request  queue  is  much 
smaller  —  about  one-tenth  what  it 
once  was. 

Sivashanmugam  says  he  likes  the  idea 
of  using  a  single  product  that  handles 
all  aspects  of  application  performance. 
“If  anything  goes  down,  our  business  is 


down _ We’ve  seen  most  big  [ven¬ 

dors]  take  too  long  to  understand  that,” 
he  says. 

For  Kentucky,  load  balancing  is  a  key 
function  of  four  application  switches 
running  Big-IP  software  from  F5  Net¬ 
works  Inc.  in  Seattle.  But  the  state  gov¬ 
ernment  also  uses  the  switches  in  its 
four  data  centers  to  monitor  trafFic  and 
the  health  of  connections  to  45  Web 
sites,  says  Rajesh  Bhabaraju,  a  consul¬ 
tant  at  Analysts  International  Corp.  in 
Minneapolis  and  a  Web  administrator 
for  the  state.  Kentucky  also  uses  Big-IP 
to  create  SSL  proxies,  so  it  doesn’t 
need  to  purchase  a  separate  SSL  prod¬ 
uct  from  another  vendor.  The  system 
has  been  in  place  for  about  18  months 


and  has  helped  reduce  support  hours 
and  costs  “drastically,”  says  Bhabaraju. 

“Big-IP  primarily  provides  reliabili¬ 
ty,”  says  Bhabaraju.  Putting  all  the  fea¬ 
tures  together  with  a  variety  of  ven¬ 
dors  might  have  been  too  complex  and 
wouldn’t  ensure  ease  of  management 
or  interoperability,  he  says. 

Thinking  Out  of  the  Box 

While  vendors  offer  a  variety  of  secu¬ 
rity  and  performance  options  from  one 
source,  the  products  aren’t  always  in 
one  box.  Life  Way  Christian  Resources 
of  the  Southern  Baptist  Convention  in 
Nashville  uses  two  devices  from  Rad- 
ware  Inc.  in  Mahwah,  N.J. 

LifeWay,  which  operates  118  retail 
stores  and  provides  online  Bible  study 
and  other  online  Christian  resources, 
installed  Radware’s  LinkProof  load 
balancer  and  FireProof  Firewall  load¬ 
balancing  products. 


David  Elliott,  systems  engineer  at 
the  nonproFit,  says  that  when  a  new 
online  curriculum  was  introduced, 
bandwidth  use  surged  35%,  but  Link- 
Proof  handled  the  load  without  adding 
bandwidth.  Prior  to  LinkProof’s 
launch,  bandwidth  had  been  sluggish 
across  three  T1  lines,  Elliott  says.  “In 
that  First  immediate  use  of  Radware,  it 
got  us  out  of  the  hole,”  he  says. 

Using  the  separate  boxes,  which  cost 
about  $60,000,  hasn’t  been  a  problem, 
but  the  implementation  of  such  prod¬ 
ucts  can  be  complex,  Elliott  warns.  “It’s 
pretty  involved,  and  I  was  surprised  at 
the  level  of  technical  knowledge  that 
your  engineers  need  to  have,”  he  says. 

While  many  companies  use  just  a  few 
features  today,  some  are  taking  maxi¬ 
mum  advantage  of  consolidated  prod¬ 
ucts.  Sawis  Communications  Corp.  in 
St.  Louis  is  making  full  use  of  all  of  the 
features  available  in  the  30  Virtual  Ser¬ 
vice  Switches  it  purchased  from  Inkra 
Networks  Corp.  in  Fremont,  Calif. 

Sawis  operates  application  infra¬ 
structure  for  other  companies  and  uses 
Virtual  Service  Switches  in  25  data 
centers  to  offer  customers  SSL  acceler¬ 
ation,  load  balancing,  Firewall  protec¬ 
tion,  intrusion  detection  and  IPsec  vir¬ 
tual  private  network  tunnel  termina¬ 
tion,  says  CEO  Rob  McCormick.  He 
says  each  switch  costs  $200,000. 

With  this  approach,  Sawis  can  use 
one  switch  to  serve  multiple  customers, 
although  some  still  prefer  to  have  sep¬ 
arate  products  for  each  function  tied 
directly  to  their  servers.  McCormick 
estimates  that  he  can  replace  the  need 
for  1,200  Ethernet  ports  to  various  Web 
servers  with  one  Inkra  switch  Filling 
half  a  rack  for  a  significant  savings  in 
space. 

McCormick  passes  on  the  savings 
from  using  a  consolidated  appliance 
to  customers.  For  example,  Sawis 
charges  customers  about  $1,500  per 
month  for  a  dedicated,  managed  Fire¬ 
wall  but  charges  just  $250  per  month  if 
the  customer  uses  the  managed  Firewall 
in  its  Virtual  Service  Switch  product. 

“Inkra  is  the  only  vendor  I’ve  found 
to  pull  all  the  functions  we  need  into  a 
single  product,”  McCormick  says.  But 
as  the  market  matures,  other  vendors 
will  offer  more  application  delivery  fea¬ 
tures  in  their  appliances.  And  that’s 
something  that  both  Sawis  and  other 
corporate  IT  organizations  are  bound 
to  want,  says  Fabbi.  ©  49489 


PLAYING  CATCH-UP 

Larger  vendor  offerings  still  lack  key  features  for  Web- 
enabled  application  delivery: 
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FIVE  LEADERS 

In  Web  Application  Delivery 


While  more  than  a  dozen  vendors  sell 
Web-enabled  application  delivery 
products  today,  five  lead  the  market 
and  two  are  at  the  top  of  the  pack, 
says  Gartner  analyst  Mark  Fabbi. 

F5  recently  announced  the  Traffic 
Management  operating  system  for  its 
Big-IP  appliances  and  has  added  “rate 
shaping,”  which  ensures  that  bandwidth 
is  available  for  high-priority  applications. 
Caching  isn’t  yet  available. 

Radware  offers  its  products  in 
appliances  such  as  its  LinkProof  load 
balancer  and  FireProof  firewall  load 
balancer.  It  also  offers  attack  signature 
filtering  and  the  LinkProof  Branch 
product  to  extend  control  beyond 


the  data  center. 

Fabbi  puts  Inkra  Networks. 
NetScaler  and  Redline  Networks 

in  the  next  tier.  The  three  offer  similar 
features.  Inkra  has  moved  beyond 
its  focus  on  service  providers  to  the 
enterprise  with  its  Inkra  1500  Virtual 
Service  Switch,  he  says.  The  remaining 
vendors  include  niche  players,  Fabbi 
says.  Array  Networks  Inc.  is  notable  for 
its  memory-based  caching;  FineGround 
Networks  Inc.  and  Pivia  Inc.  have 
complementary  products  that  provide 
application  optimization;  and  Nauticus 
Networks  Inc.  has  strong  SSL  and 
traffic  management  capabilities. 

-Matt  Hamblen 
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Adaptable  substance  may  cool  computers  and  put 
a  zoom  lens  in  your  cell  phone.  By  Gary  H.  Anthes 


A  drop  of  water  glides  across 
the  flat  surface  like  quick¬ 
silver,  moving  effortlessly 
from  place  to  place  as  the 
surface  is  tilted.  It’s  hard  to 
believe  that  the  little  bead  is  water,  for 
it  doesn’t  wet  the  surface  as  it  races 
around,  seemingly  without  friction. 

The  little  drop  in  this  impromptu 
laboratory  demonstration  isn’t 
on  an  ordinary  surface.  It’s  rid¬ 
ing  on  “nanograss,”  a  bed  of 
upright  silicon  posts  a  thou¬ 
sand  times  thinner  than  a  hu¬ 
man  hair.  Bell  Labs,  the  research  and 
development  arm  of  Lucent  Technol¬ 
ogies  Inc.,  is  betting  that  nanograss 
will  find  its  way  into  commercial  prod¬ 
ucts  ranging  from  low-friction  boat 
hulls  to  heat  sinks  for  computer  proc¬ 
essors  and  batteries  v/ith  a  shelf  life  of 
25  years.  It  will  be  one  of  the  first 
nanoscale  technologies  commercial¬ 
ized  by  Bell  Labs  and  its  partner,  the 


New  Jersey  Nanotechnology  Consor¬ 
tium  (NJNC). 

“Nanograss  is  a  whole  new  class  of 
structure,  where  we  are  nanoengineer¬ 
ing  the  surface  of  a  material,”  says 
David  Bishop,  a  research  vice  president 
at  Bell  Labs  and  president  of  the  NJNC. 
“By  adjusting  the  area  of  these  posts 
and  their  density,  and  how  you  pattern 
them,  you  can  engineer  how  the 
fluid  interacts  with  the  sub¬ 
strate.  So  you  are  not  stuck  with 
what  nature  gave  you,  and  you 
can  do  lots  of  amazing  things.” 

It  is  also  possible  to  alter  the  proper¬ 
ties  of  nanograss  on  the  fly  by  chang¬ 
ing  the  temperature,  applying  ultra¬ 
sound  or  a  small  voltage,  or  other 
means.  A  voltage  builds  up  an  electri¬ 
cal  field  at  the  tips  of  the  nanograss, 
and  that  changes  its  wettability 
through  an  effect  called  electrowetting. 

That  could  allow  the  electrodes  and 
electrolytes  in  a  battery  to  remain  sep¬ 


arated  until  the  battery  is  needed,  ex¬ 
tending  its  shelf  life  indefinitely.  Con¬ 
ventional  batteries  discharge  at  the 
rate  of  3%  to  5%  a  month,  even  when 
not  in  use.  Nanograss  batteries  will 
cost  less  and  have  far  higher  power-to- 
weight  ratios,  researchers  predict. 

Bishop  says  other  applications  of 
nanograss  include  the  following: 

■  Heat  sinks  for  computer  processors 
and  other  devices.  “It’s  very  hard  to  get 
high  fluid  flows  through  small  silicon 
channels;  it  kind  of  jams  up,”  Bishop 
says.  “But  nanograss  allows  much 
higher  fluid  flow  because  the  liquid  is 
only  interacting  with  one-hundredth 
as  much  surface.” 

Commercialization  of  the  nanograss 
heat-sink  idea  is  two  to  three  years 
away,  but  Bell  Labs  is  about  to  sign  a 
contract  with  a  company  to  develop  a 
“smart”  heat  sink  that  can  change  its 
cooling  properties  as  needs  change, 
he  says.  The  idea  is  noteworthy  be¬ 
cause  chip  makers  have  found  that 
heat  dissipation  is  one  of  the  greatest 
obstacles  to  making  silicon  circuits 
smaller  than  the  current  generation, 
at  90  nanometers. 

■  Liquid  lenses.  It’s  possible  to  con¬ 
struct  tiny,  cheap  liquid  lenses  whose 
focal  lengths  and  other  properties  can 
be  changed  very  quickly  by  the  appli¬ 
cation  of  electrical  fields.  Bishop  pre¬ 
dicts  that  disposable  cameras  and  cell 
phones  with  zoom  lenses  based  on  this 
idea  could  be  available  in  a  year. 

■  “Liquid  photonics.”  In  three  to  five 
years,  nanograss  might  also  go  into 
switches,  power  splitters,  filters,  multi¬ 
plexers  and  other  devices  in  order  to 
manipulate  light  in  ways  that  are  diffi¬ 
cult  to  do  by  conventional  means. 

“Nanograss  is  an  important  technol¬ 
ogy  because  it  combines  a  materials 
breakthrough  with  electronic  proper¬ 
ties  that  enhance  the  material  and  allow 
it  to  be  used  as  a  platform  for  a  slew  of 
applications,”  says  Josh  Wolfe,  a  manag¬ 
ing  partner  at  Lux  Capital  Group  LLC,  a 
venture  capital  firm  in  New  York. 

Wolfe  says  such  “hybridization  of 
disciplines”  is  a  defining  characteristic 
of  many  nanotech  applications,  and  it 
allows  for  advancements  that  would 
have  been  impossible  in  a  world  where 
scientists  generally  concentrated  on 
just  one  field  at  a  time. 

MPhase  Technologies  Inc.  in  Nor¬ 
walk,  Conn.,  is  working  with  Bell  Labs 
and  the  NJNC  at  Bell  Labs’  $400  mil¬ 
lion  “nanofabrication  laboratory”  in 
Murray  Hill,  N.J.,  to  develop  nanotech 
batteries.  The  parties  will  share  any 
patents  that  result.  MPhase  will  pro¬ 
duce  some  batteries  itself  and  will  li¬ 
cense  the  technology  to  other  battery 


FUTURE 
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makers,  says  Steve  Simon,  the  compa¬ 
ny’s  executive  vice  president  for  R&D. 

MPhase  will  make  conventional 
nonrechargeable  batteries  and  “re¬ 
served”  batteries  —  those  that  don’t 
combine  the  electrolyte  and  electrodes 
until  the  battery  is  needed,  Simon  says. 
The  batteries  will  be  used  in  military 
applications  in  2006  and  in  commer¬ 
cial  devices,  such  as  cell  phones,  hand¬ 
held  devices  and  notebook  computers, 
in  about  three  years.  Preliminary 
benchmark  data  from  mPhase  shows 
that  the  batteries  will  have  three  to 
four  times  the  power-to-weight  ratio 
of  ordinary  AA  batteries.  ©  49480 


Gold  Rush 

“THE  PERFECT  STORM  OF  TECHNOLOGY.” 

That’s  what  Bell  Labs’  David  Bishop 
calls  nanotechnology.  “Physics,  chem¬ 
istry  and  biology  all  intersect  at  the  nano¬ 
scale,  and  all  have  gotten  there  simulta¬ 
neously,”  he  says. 

“Nanotech  is  about  bringing  engineer¬ 
ing  precision  and  discipline  to  a  world 
where  we  know  lots  of  interesting  things 
happen  at  the  nanoscale,  rather  than  wait 
5  billion  years  for  something  to  evolve,” 
he  adds. 

Lucent  Technologies  in  2003  estab¬ 
lished  the  New  Jersey  Nanotechnology 
Consortium,  a  regional  partnership  of  Bell 
Labs,  the  state  of  New  Jersey  and  the 
New  Jersey  Institute  of  Technology.  The 
heart  and  soul  of  the  consortium  is  Bell 
Labs’  nanoscale  fabrication  facility,  which 
can  take  an  idea  from  concept  to  com¬ 
mercialization. 

The  National  Science  Foundation  esti¬ 
mates  that  that  by  2015,  nanotechnology 
will  generate  $1  trillion  in  revenue  in  the 
U.S.  “It’s  now  at  a  few  tens  of  billions  a 
year,  so  over  the  next  10  to  15  years,  nan¬ 
otech  revenue  will  grow  by  a  factor  of 
100,”  Bishop  says.  “No  other  area  of  tech- 
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Security  Review  Uncovers 
Rampant  Virus  Infections 


Our  new  journal  writer  makes  a  most 
unpleasant  discovery  just  as  the  IT 
auditors  arrive.  By  C.  J.  Kelly 


When  the  call  came, 

I  wasn’t  surprised. 
The  voice  at  the 
other  end  of  the 
line  said,  “Our  network  securi¬ 
ty  analysis  tool  has  found 
something  we  call  ‘suspicion 
indicators’  on  your  network.  I 
think  you  need  to  look  at  this 
right  away.”  I  had  a  sick  feeling 
as  my  mind  raced  to  the  con¬ 
versations  I  would  soon  be 
having  with  senior  manage¬ 
ment.  I  tried  to  focus  on  the 
conversation  at  hand. 

After  several  years 
of  network  security 
consulting  in  health 
care,  financial  ser¬ 
vices  and  high-tech 
companies,  I  had 
accepted  a  full-time 
position  at  a  not-so-high-tech 
company,  thinking  it  would  be 
an  easy,  kick-back  kind  of  job 
with  a  regular  paycheck. 

In  the  short  time  I’ve  been 
here,  I’ve  realized  that  I  traded 
one  set  of  problems  for  anoth¬ 
er.  Before,  I  could  point  out 
all  the  security  issues  to  my 
clients  and  get  paid  for  that  — 
and  require  additional  large 
sums  of  money  for  the  follow- 
on  remediation  work.  But  now, 
I’m  on  the  other  end  of  the 
equation.  I  am  now  responsi¬ 
ble  for  the  network,  and  the  se¬ 
curity  consultants  are  pointing 
out  all  the  problems  to  me. 
What  was  I  thinking? 

The  caller  was  with  an  out¬ 
side  network  security  compa¬ 
ny  we  had  brought  in  to  do  a 
high-level  security  assess¬ 
ment.  I  had  hired  this  firm  un¬ 
der  the  constraints  of  a  small 
budget  and  tight  timeline,  and 
with  the  internal  and  external 
IT  auditors  one  week  away 
from  walking  in  the  door,  a 
quick  decision  was  needed. 

The  security  assessment 
vendors  we  had  used  in  the 


past  had  primarily  focused 
on  access-control  issues  and 
known  vulnerabilities  —  the 
usual  fare.  This  time,  I  wanted 
consultants  who  were  more 
advanced  and  experienced 
than  our  staff. 

I  had  interviewed  a  number 
of  consulting  firms  and  was 
becoming  a  little  desperate. 
When  I  asked  the  team  if  they 
knew  of  anyone,  I  was  intro¬ 
duced  to  a  company  that  had 
developed  a  proprietary  tool 
that  incorporated 
many  of  the  open- 
source  tools  we  use. 
I  was  impressed 
by  its  functionality 
and  said,  “This  is 
like  ArcSight  on 
steroids!”  The  lead 
security  consultant’s  resume 
read  like  a  who’s  who  of  the 
scientific  world.  He  was  in¬ 
volved  in  the  Internet  before 
it  was  ever  called  that.  And 
to  top  it  off,  he  was  the  most 
unassuming  and  interesting 
person  I  had  ever  met.  I  hired 
his  firm,  and  we  got  started 
right  away. 

Within  days  of  data  collec¬ 
tion  and  analysis,  the  consul¬ 
tants  had  discovered  hundreds 
of  thousands  of  suspicious 
connections  to  sites  all  over 
the  world,  many  of  which 
were  very  undesirable.  Using 
their  reports,  I  typed  in  a 
Google  search  string  that  in¬ 
cluded  the  port  numbers  and 


January  through  April, 
we  had  no  virus  out¬ 
breaks.  In  May,  some¬ 
thing  went  boink. 


country  names.  The  informa¬ 
tion  I  found  pointed  to  back¬ 
door  Trojan  horses  associated 
with  a  number  of  viruses. 
These  Trojans  horses  had  to 
be  the  culprit  for  the  mysteri¬ 
ous  connections. 

I  tracked  down  my  boss  and 
explained  the  findings,  my 
theory  of  virus/Trojan  activity 
and  my  plan  of  attack.  I  also 
told  her  that  I  couldn’t  say 
whether  our  network  had 
been  compromised  but  that 
I  would  keep  her  updated. 

We  discussed  whether  we 
should  take  this  information 
to  the  C  level  or  do  more  re¬ 
search.  Realizing  the  legal  im¬ 
plications  of  a  network  com¬ 
promise,  we  decided  that  we 
needed  more  information  be¬ 
fore  communicating  upward. 
My  lead  security  engineer  was 
on  vacation,  so  I  got  to  work. 

Ports  of  Call 

I  had  to  determine  which 
connections  were  valid.  A 
review  of  outbound  firewall 
rules  confirmed  that  they 
were  appropriately  limiting. 

I  put  together  a  spreadsheet 
comparing  the  firewall  rules 
with  known  backdoor  Trojans 
that  operate  on  our  allowable 
ports.  At  least  I  had  narrowed 
the  list  of  Trojans  to  look  for.  I 
decided  to  focus  immediately 
on  Ports  80  (HTTP)  and  25 
(SMTP),  since  they  are  the 
most  widely  exploited. 

We  use  Web  filtering  tech¬ 
nology  and  have  a  robust  anti¬ 
virus  program,  so  I  couldn’t 
understand  what  was  going 
on.  Then  I  found  that  most  of 
the  suspicious  activity  was  on 
a  network  segment  that  wasn’t 
being  filtered,  which  means 
malicious  Web  sites  weren’t 
being  blocked.  Great.  I  asked 
the  network  architect  if  we 
could  deploy  our  Web  filtering 
technology  to  that  segment. 
His  answer:  We  needed  two 
more  routers,  and  it  would 
take  weeks  to  get  the  equip¬ 
ment  in  place.  Roadblock. 
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The  next  step  was  to  identi¬ 
fy  and  inspect  the  systems 
from  whence  the  connec¬ 
tions  were  originating,  but  the 
DHCP  logs  were  basically  use¬ 
less.  Another  roadblock. 

I  logged  onto  the  central 
antivirus  control  manager.  It 
was  reporting  that  hundreds 
of  systems  were  infected!  I  ran 
month-to-month  reports  be¬ 
ginning  in  January  to  see  if 
there  was  a  pattern.  Sure 
enough,  January  through 
April,  we  had  no  virus  out¬ 
breaks.  In  May,  something 
went  boink.  From  May 
through  the  present,  the  con¬ 
trol  manager  was  reporting  a 
long  list  of  viruses  active  on 
our  network,  many  of  which 
installed  backdoor  Trojans. 
This  was  not  a  good  sign.  I 
asked  the  data  center  opera¬ 
tions  manager  for  his  help. 

Our  antivirus  vendor  con¬ 
firmed  that  in  May  the  anti¬ 
virus  services  went  down 
on  the  primary  e-mail  server 
because  of  file  corruption.  It 
took  days  to  get  the  system 
back.  During  that  time,  an 
unknown  number  of  e-mail- 
borne  viruses  came  into  our 
network.  Many  of  those, 
though  detected,  couldn’t  be 
quarantined.  The  cleanup  will 
require  manual  effort  and  re¬ 
sources.  Time  to  involve  up¬ 
per  management. 

I  have  had  quite  the  head¬ 
ache  in  the  past  few  weeks, 
but  the  good  news  is  that  the 
unsavory  results  of  the  securi¬ 
ty  assessment  have  allowed  us 
to  identify  a  number  of  things 
that  need  to  be  fixed  and  to 
justify  a  budget  for  better 
tools,  additional  head  count 
and  possibly  an  organizational 
adjustment.  The  consultants 
recommended  that  informa¬ 
tion  security  be  given  visibili¬ 
ty  at  the  C  level,  as  in  CSO. 

But  for  me,  it’s  back  to  the  salt 
mines.  I  will  be  spearheading 
a  virus  cleanup  effort.  I 

WHAT  DO  YOUTH? 

This  week’s  journal  is  written  by  a  real  secu¬ 
rity  manager,  “C.J.  Kelly,”  whose  name 
and  employer  have  been  disguised  for 
obvious  reasons.  Contact  her  at  mscjkelly® 
yahoo,  com,  or  join  the  discussion  in  our 
forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 

0  computerworld.com/secjournal 
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New  Tool  Helps 
Authenticate  PDFs 

Adobe  Systems  Inc.  and  Geo- 
Trust  Inc.  announced  the  Cer¬ 
tified  Document  Service,  de¬ 
signed  to  verify  and  authenti¬ 
cate  the  identity  of  senders 
of  Adobe  PDF  files.  With  Geo- 
Trust’s  True  Credentials  digital 
signing  technology,  users  can 
create  “trusted  electronic 
documents”  that  organiza¬ 
tions  can  share,  according  to 
a  statement  from  the  two  com¬ 
panies.  The  service  can  be 
used  to  digitally  sign  individual 
documents  or  large  volumes  of 
PDF  files,  the  statement  said. 
Pricing  starts  at  $895  for  a 
single-user,  one-year  signing 
credential. 

F5  Improves  Its 
VPN  Technology 

Seattle-based  F5  Networks 
Inc.  last  week  announced  a 
new  version  of  its  FirePass 
Controller,  Secure  Sockets 
Layer  virtual  private  network 
technology  that  features 
broader  client  and  application 
access  support,  enhanced 
management  capabilities  and 
new  security  features.  The  F5 
Firepass  VPN  lets  users  access 
any  Windows,  Linux,  Macin¬ 
tosh  or  Solaris  applications 
from  a  wide  range  of  devices, 
including  PDAs.  A  new  “adap¬ 
tive  policy  engine”  allows  for 
better  management  and  more 
granular  access  control,  F5 
said.  Pricing  starts  at  $2,490 
for  100  concurrent  users. 

Easier  SS0  Rollout 

M-Tech  Information  Technol¬ 
ogy  Inc.  has  integrated  its 
P-Synch  password  manage¬ 
ment  tool  and  Citrix  Systems 
lnc.’s  MetaFrame  Password 
Manager.  New  capabilities  in¬ 
clude  self-service  password 
reset  for  forgotten  or  expired 
passwords,  which  M-Tech  said 
can  help  reduce  password- 
related  calls  to  help  desks  by 
85%.  M-Tech  also  said  the  in¬ 
tegrated  product  can  let  orga¬ 
nizations  deploy  a  single  sign- 
on  system  without  first  acquir¬ 
ing  current  user  log-ins  and 
passwords. 


WatchGuard®  Firebox®  X,  the  world’s  first  fully  model-upgradeable,  expandable  firewall  security  appliances.  Buy  the  network 
protection  you  need  now.  Upgrade  performance,  features,  and  security  services  as  your  business  grows  -  all  with  a  simple  license 
key.  Tough  firewall  protection  with  proven  WatchGuard  reliability.  Powerful.  Easy  to  manage.  It’s  the  security  you  really  need. 
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Attensity  Suite  for 
Unstructured  Data 

@  Attensity  Corp.  in  Palo  Alto, 
Calif.,  announced  the  Attensity 
Application  Suite.  It  is  based  on 
Attensity  Server,  which  extracts 
relational  facts,  entities  and 
events  from  text-based  informa¬ 
tion.  The  suite  is  available  in  ver¬ 
sions  tailored  to  individual  verti¬ 
cal  industries  using  Attensity 
Knowledge  Libraries.  Available 
now,  Attensity  Application  Suite 
starts  at  $50,000. 

ForcelO  Launches 
New  Switch  Line 

■  ForcelO  Networks  Inc.  in  Milpi¬ 
tas,  Calif.,  last  month  introduced 
the  TeraScale  E-Series  family 
of  switches.  The  new  switches 
deliver  672  line-rate  Gigabit  Eth¬ 
ernet  ports  and  56  line-rate  10 
Gigabit  Ethernet  ports  in  a  single 
chassis,  according  to  ForcelO. 
The  four-port  10  Gigabit  Ethernet 
LAN/WAN  line  card,  available 
now,  sells  for  $48,000. 


SAS  Announces 
Forecasting  App 

■  SAS  Institute  Inc.  has  an¬ 
nounced  the  High-Performance 
Forecasting  application.  The  tool 
is  designed  to  automate  predictive 
analysis  operations  and  make 
them  more  accessible  to  nontech¬ 
nical  users.  It  is  expected  to  be 
particularly  useful  in  industries 
such  as  retail,  where  sales  are  af¬ 
fected  by  seasonal  variables,  ac¬ 
cording  to  Cary,  N.C.-based  SAS. 
Pricing  starts  at  $50,000. 


Movaris  Upgrades 
Sarb-Gx  Suite 

a  Movaris  Inc.  in  Cupertino,  Calif., 
has  introduced  Certainty  8.0,  a 
modular  suite  of  its  software  for 
managing  finances  according  to 
requirements  of  the  Sarbanes- 
Gxley  Act.  New  functionality  in¬ 
cludes  tools  far  ensuring  compli¬ 
ance  with  Sections  404  and  302, 
according  to  Movaris.  Certainty 
8.0  runs  on  SQL  Server,  IBM  DB2 
and  Oracle  database  systems. 


CURT  A.  MONASH 

Finding  the 
Candidate  for  IT 


Which  u.s.  presidential  candidate 

is  most  in  tune  with  issues  of  partic¬ 
ular  interest  to  IT  professionals? 

On  many  subjects,  the  two  major 
candidates,  and  their  parties,  are 
pretty  equivalent.  Both  George  Bush  and  John  Kerry 
support  federally  subsidized  universal  broadband  ac¬ 
cess,  extension  of  the  R&D  tax  credit,  education  pro¬ 


grams  in  science  and  tech¬ 
nology,  and  restraint  on  In¬ 
ternet  taxation.  Both  Repub¬ 
licans  and  Democrats  have  a 
long  track  record  of  support¬ 
ing  a  high-tech  military,  al¬ 
though  Republicans  some¬ 
times  overspend  a  bit  (e.g., 
the  “Star  Wars”  and  artificial 
intelligence  boondoggles  of 
the  1980s),  while  Democrats 
may  spend  too  little. 

But  on  some  issues  of 
particular  interest  to  IT  pro¬ 
fessionals,  there  is  real  sep¬ 
aration  between  the  two  candidates: 

Benefits  for  self-employed  workers.  Many 
IT  workers  are  or  may  soon  become 
“consultants.”  Health  insurance  options 
for  self-employed  workers  can  be  pretty 
grim.  One  major  differentiator  between 
the  two  candidates  is  Kerry’s  vow  to  pro¬ 
vide  self-employed  workers  with  access 
to  “the  same  affordable  coverage  policies 
that  members  of  Congress  get  today,”  via 
an  extension  of  the  Federal  Employees 
Health  Benefits  Program.  Maybe  he  can 
deliver  that,  and  maybe  he  can’t.  But  ei¬ 
ther  way,  Kerry  can  at  least  be  expected 
to  make  a  major  assault  on  the  problem 
of  health  coverage  for  those  households 
in  which  nobody  is  employed  by  a  sizable 
enterprise.  Bush  expresses  no  similar  in¬ 
tention,  except  for  “medical  savings  ac¬ 
counts”  —  and  those  are  supplements  to 
health  insurance,  not  replacements  for  it. 

Offshore  competition.  A  president  can’t 
stop  the  flow  of  IT  jobs  overseas,  but  he 
can  probably  slow  it  down.  Kerry  has 
vowed  to  do  what  he  can  about  the 


outflow  of  jobs,  while  Bush’s 
approach  is  wholly  laissez 
faire. 

Tax  breaks  for  start-ups.  Be¬ 
yond  the  R&D  tax  credit, 
Bush  favors  tax  breaks  for 
dividend-paying  corpora¬ 
tions,  while  Kerry  favors  tax 
breaks  for  start-ups.  Start¬ 
ups  produce  new  technol¬ 
ogy,  and  new  IT  usually 
leads  to  new  or  better  jobs. 

Internet  freedom.  We  used 
to  believe  that  the  Internet 
would  simply  route  around 
censorship.  But  the  examples  of  China 
and  Vietnam  show  that  government  con¬ 
tent  control  is  a  genuine  danger  to  the 
Internet.  The  Bush  administration’s  ob¬ 
session  with  the  menace  of  exposed 
flesh  seems  like  the  first  step  on  the  slip¬ 
pery  slope  of  censorship. 

Also  crucial  to  the  evolution  of  the  In¬ 
ternet  is  personal  data  privacy.  Home¬ 
land  security,  electronic  medical  records 
and  even  advanced  CRM  all  depend  on 
tremendous  amounts  of  data  integration. 
But  unlimited  nationwide  data  integra¬ 
tion  is  —  and  probably  should  be  —  po¬ 
litically  impractical,  unless  it’s  accompa¬ 
nied  by  strong  data  privacy  safeguards. 
The  costs  of  these  safeguards  should  be 
manageable,  since  data  privacy  require¬ 
ments  in  other  countries  will  mean  that 
the  relevant  software  and  systems  must 
be  developed  anyway. 

The  USA  Patriot  Act,  which  Bush 
proposed  and  Kerry  voted  for,  is  a  major 
assault  on  data  privacy.  Even  so,  Kerry 
distinguishes  himself  from  Bush  in  this 


area.  He  has  sponsored  admirable  data 
privacy  legislation  in  the  past  (in  part¬ 
nership  with  Republican  Sen.  John  Mc¬ 
Cain)  and  promises  more  in  the  future. 

Some  important  IT-related  issues 
aren’t  being  addressed  by  either  candi¬ 
date.  Federal  computer  systems  procure¬ 
ment  is  a  major  fiasco,  leaving  us  with  an 
air  traffic  control  system  mired  in  the 
1970s  and  an  FBI  intranet  that  lacks  an 
effective  search  capability.  Neither  can¬ 
didate  has  made  a  peep  on  the  subject. 

Electronic  health  records  will  be  a 
huge  savior  of  lives  and  costs,  assuming 
that  there  are  proper  provisions  for  pri¬ 
vacy  and  security.  But  while  both  candi¬ 
dates  have  expressed  support  for  the 
idea,  neither  has  offered  a  concrete  plan 
for  making  it  happen. 

Even  so,  on  the  IT-specific  issues 
where  the  candidates  do  have  positions, 
Kerry  has  a  clear  advantage  over  Bush. 
And  his  advantage  in  science  and  tech¬ 
nology  extends  beyond  IT.  Dozens  of 
Nobel  laureates  support  Kerry  over  Bush 
because  of  his  stated  commitment  to  sol¬ 
id  science-based  policymaking. 

Most  voters  will  probably  place  other 
issues  ahead  of  purely  IT-related  ones. 
Iraq,  terrorism,  loose  nukes,  nuclear  pro¬ 
liferation,  abortion  and  AIDS  prevention 
are  all  life-and-death  matters.  Potential 
Supreme  Court  vacancies  will  be  hugely 
important.  So,  too,  are  fiscal  and  eco¬ 
nomic  questions:  Should  tax  cuts  be 
funded  by  government  borrowing?  Is 
Bush  responsible  for  his  Hooveresque 
record  of  deficits  and  job  losses,  or  can  it 
be  explained  away  by  9/11  and  the  col¬ 
lapse  of  the  tech  bubble? 

But  to  the  extent  that  you’re  voting 
from  an  IT  perspective,  John  Kerry  is 
the  best  candidate.  ©  49820 

MORE  ONUNE 

Sound  off:  Agree?  Disagree?  Think  the  author 
is  a  right-wing  loony  or  a  leftist  stooge?  Visit  our 
forum  on  government  issues  in  IT  and  weigh  in: 

QuickLink  a5030 
www.computerworld.coin 

Want  our  opinion?  For  more  columns  and 

©links  to  our  archives,  go  to 

www.computerworld.com/opinions 
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Protect  your  information  with  the  Data  Security 
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customer  lists:  networked  copiers/printers  process 
sensitive  information  every  day.  Unfortunately,  their 
hard  drives  can  also  be  accessed  via  the  network, 
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corporate  security,  we've  created  our  Data  Security 
Kit.  It's  the  first  copier  and  printer  protection  to 
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J.  Greg  Hanson’s  agenda 
ranges  from  e-mail  to  inau¬ 
gurations  —  all  on  the  na¬ 
tional  stage.  And  talk  about 
tough  customers.  Page  40 


Career  Watch 

GMAC’s  Chris  Laping  offers  advice 
for  making  midlife  career  changes  and 
dealing  with  problem  employees. 

Also,  top  B-schools  for  IT;  the  morph¬ 
ing  CIO;  and  small  companies  lead  in 
IT  hiring.  Page  42 


OPINION 

Development  Drop-Down  Budgeting 

Ongoing  infrastructure  and  support 
costs  for  new  development  can  throw 
your  hard-won  budget  out  of  whack, 
says  Bart  Perkins.  Here’s  how  to  avoid 
nasty  surprises.  Page  43 


CFOs  of  IT  face  an  uphill 
course  in  their  efforts 
to  measure  and  quantify 
the  often  intangible 
benefits  of  technology. 
By  Thomas  Hoffman 

Mike  scardina  has  been  the  chief  financial 
officer  for  IT  at  Allstate  Insurance  Co.  for 
nearly  10  years.  But  it’s  only  in  the  past 
few  years  that  the  spotlight  on  his  role 
has  intensified.  Allstate’s  annual  technol¬ 
ogy  spending  has  swelled  to  more  than 
$1  billion  a  year,  and  Scardina  has  come 
under  enormous  pressure  from  senior  management 
to  help  cost-justify  the  Northbrook,  Ill.-based  insur¬ 
er’s  technology  investments. 

“It’s  not  enough  to  say  we’re  going  to  spend  $150  mil¬ 
lion  on  a  data  center.  People  will  ask,  ‘Well,  yeah,  but 
why  $150  million  and  not  $75  million?’  ”  he  says. 

As  IT  spending  has  soared  to  half  of  all  capital  ex¬ 
penditures  at  many  companies,  so-called  CFOs  of  IT 
are  being  required  by  top  brass  to  provide  greater 
clarity  and  transparency  around  those  investments. 

“I  define  my  role  this  way:  to  determine  and  ex¬ 
plain  to  senior  management  what  AIG  is  spending 
on  IT  and  to  provide  reasonable  assurance  that 
expectations  are  being  met,”  says  Joseph  Barkley,  1 
CFO  at  AIG  Technology  Management  Services,  i) 
the  IT  services  arm  of  New  York-based  insurance  I 
giant  American  International  Group  Inc. 

Changing  Roles 

Indeed,  the  roles  for  CFOs  of  IT  have  changed.  “The 
scope  of  my  role  has  expanded  well  beyond  manag¬ 
ing  and  controlling  IT  budgets  since  2002,”  says 
Grant  Zaichick,  head  of  IS  controlling  for  the  Ameri¬ 
cas  at  DHL  Information  Services  (Americas)  Inc.,  the 
Scottsdale,  Ariz.-based  IT  services  arm  of  trans¬ 
portation  and  logistics  provider  DHL  International 
Ltd.  In  addition  to  overseeing  IT  accounting  and 
budgeting,  Zaichick  has  recently  taken  on  responsi¬ 
bility  for  global  IT  reporting  and  IT  contracts  and  as¬ 
set  management  for  the  Americas  region. 
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The  IT  CFO’s  position  “is  changing  from  a  custo¬ 
dial/tactical  role  to  more  of  a  strategic  role,”  says 
Howard  Rubin,  executive  vice  president  at  Stamford, 
Conn.-based  Meta  Group  Inc.  “They’re  in  the  nexus 
of  negotiations.” 

Simply  put,  being  a  CFO  of  IT  “is  a  real  tough  job,” 
says  Bill  Johnston,  president  of  Alinean  LLC,  a  consult¬ 
ing  firm  in  Orlando.  There  are  several  reasons  for  this. 

For  starters,  it’s  still  a  universal  challenge  —  even 
for  financial  wizards  —  to  effectively  measure  and 
quantify  the  impact  that  technology  investments  are 
having  on  profits  or  operational  efficiency.  Add  to  that 
the  dearth  of  tools  available  to  attempt  those  measure¬ 
ments.  Finally,  throw  in  the  complexities  of  develop¬ 
ing  a  standardized  approach  to  valuing  IT  investments 
across  multiple  business  divisions  or  regions,  and  it’s 
a  wonder  that  IT  controllers  can  do  their  jobs  at  all. 

Unaccountable 

Measuring  the  quantifiable  impact  of  IT  investments 
is  a  big  challenge  for  all  types  of  companies,  even 
those  with  world-class  IT  practices  such  as  Intel 
Corp.  Showing  the  link  between  IT  spending  and  the 
benefits  accrued  is  the  “key  issue  that  nearly  every 
IT  organization  faces,”  says  Intel  CIO  Doug  Busch. 

Sure,  Intel  has  continually  refined  its  IT  funding 
model.  And  it’s  had  a  finance  manager  in  at  least  one 
of  its  IT  organizations  since  1994,  including  Theresa 
Kelly,  who  took  over  as  CFO  for  the  company’s  newly 
consolidated  IT  department  a  few  months  ago,  says 
Busch.  Intel  has  also  taken  advantage  of  IT  portfolio 
management  and  other  measurement  techniques  to 
help  its  IT  organization  identify  the  link  between  IT 
and  more  than  $1  billion  in  bottom-line  improve¬ 
ments  to  the  company  between  2000  and  early  2004, 
says  Busch. 

But  he’ll  also  tell  you  that  Intel  is  having  as  much 
trouble  as  any  company  getting  its  accounting  sys¬ 
tems  to  assimilate  IT-related  finances  into  its  core 
accounting  practices. 

Allstate’s  Scardina  understands.  “Legacy  finance 
systems  aren’t  well  suited  to  keeping  track  of  IT  in¬ 
vestments,  particularly  at  the  kind  of  granular  level 
that  we  feel  we  need  in  order  to  provide  the  clarity  of 
spend,”  he  says.  For  instance,  standard  accounting 
systems  don’t  provide  Allstate’s  IT  finance  profes¬ 
sionals  with  the  ability  to  track  the  number  of  desk¬ 
tops  in  use  across  the  organization  or  processor  pow¬ 
er  in  use  per  IT  dollar  spent,  notes  Scardina. 

Allstate  does  use  IT  asset  management  software  to 
help  it  track  hardware  and  software  systems.  But  the 


WHO  ARE  THESE  GUYS? 

CFOs  of  IT  are  the  finance  people  who  oversee  the 
business  of  running  an  IT  department  or  services 

unit  at  a  company.  Although  their  responsibilities 
vary  from  company  to  company,  their  duties  include 
oversight  of  IT  budgets,  IT  procurement,  asset 
management,  cost  analysis  and  benchmarking  IT 
competencies  against  those  of  competitors  and 
other  companies.  Most  CFOs  of  IT  report  to  the 
CIO,  but  some  have  dotted-line  reporting  to  the 
corporate  CFO. 

Although  some  organizations  have  had  people  in 
these  roles  for  more  than  20  years,  the  position  has 
become  increasingly  popular  since  the  economy 
started  to  soften  in  mid-2000  and  senior  manage¬ 
ment  began  to  severely  scrutinize  IT  spending.  Still, 
less  than  10%  of  U.S.  companies  have  someone 
who’s  formally  in  an  IT  finance  role,  says  Bill  Johns¬ 
ton,  president  of  consulting  firm  Alinean. 

-  Thomas  Hoffman 


insurer’s  accounting  software  goes  only  so  far  in  pro¬ 
viding  Scardina  and  his  staff  with  the  kind  of  finan¬ 
cial  information  on  IT  investments  that  they  need. 

“From  a  corporate  standpoint,  you  want  to  have 
one  set  of  financial  records  to  report  on,”  Scardina 
says.  “But  from  an  IT  standpoint,  [accounting  sys¬ 
tems]  don’t  have  all  the  data  you  need.” 

To  help  resolve  those  kinds  of  issues,  AIG  has  de¬ 
veloped  common  financial  reporting  processes  and 
software  templates  to  collect  IT-related  financial 
data  across  its  worldwide  operations  and  feed  it  into 
the  company’s  Hyperion  Solutions  Corp.  accounting 
system,  says  Barkley. 

But  the  accounting  system  problems  are  further 
exacerbated  at  global  companies  such  as  Chicago- 
based  Aon  Corp.,  which  has  business  divisions  in  120 
countries.  “IT  is  a  function  that  runs  across  all  parts 
of  the  organization,  and  it’s  very  difficult  to  extract 
the  functional  costs  from  the  [profit  and  loss  state¬ 
ments]  of  various  reporting  systems,”  says  David 
Barker,  vice  president  of  global  IT  finance  for  the 
provider  of  risk  management,  reinsurance  and  hu¬ 
man  capital  consulting  services. 

The  bottom  line  is  that  many  CFOs  of  IT  are  hav¬ 
ing  a  hard  time  translating  to  senior  management  the 
effect  that  IT  investments  are  having  on,  well,  the 
bottom  line. 


Besides  the  difficulties  inherent  in  measuring  intan¬ 
gibles  across  multiple  divisions  with  inadequate  tools, 
there  are  other  problems.  CFOs  of  IT  “don’t  have  good 
data  or  good  information,  and  that  makes  it  tough  for 
them  to  figure  out  how  much  it  costs  them  to  run  a 
data  center  and  whether  it  makes  sense  to  outsource 
it,”  says  Barbara  Gomolski,  an  analyst  at  Gartner  Inc. 
and  a  Computerworld  columnist. 

Another  factor  that  makes  it  tough  for  CFOs  of  IT 
to  do  their  jobs  effectively  is  the  lack  of  financial 
know-how  among  IT  staffers  and  midlevel  IT  man¬ 
agers.  “It’s  usually  a  relatively  small  number  of  peo¬ 
ple  at  the  top  of  the  IT  [organizational]  chart  who  are 
‘with  it’  financially,”  says  Gomolski. 

Teaching  Financialese 

Some  IT  controllers  are  attacking  the  problem  by 
having  their  finance  staffers  educate  IT  workers  on 
financialese.  At  Allstate,  everyone  who’s  involved  in 
IT  decision-making  has  received  training  in  the  com¬ 
pany’s  financial  allocation  process,  says  Scardina. 

At  DHL,  Zaichick  and  his  staff  have  worked  closely 
with  the  company’s  program  management  office  and 
technical  staff  over  the  past  few  years  to  ensure  that 
front-line  technology  staffers  understand  the  finan¬ 
cial  requirements  necessary  to  develop  a  business 
case  for  a  project. 

Other  companies  have  taken  more  formal  ap¬ 
proaches  to  educating  IT  workers  on  finances.  At 
Intel,  all  employees  are  able  to  take  a  “business 
acumen  class,”  which  educates  workers  on  the  basic 
business  parameters  for  the  company  (i.e.,  assessing 
Intel’s  progress  against  the  competition),  says  Busch. 
In  addition,  IT  project  managers  are  taught  to  help 
the  IT  finance  team  evaluate  financial  alternatives  as 
part  of  their  skills  training,  he  says. 

To  help  both  IT  and  finance  executives  get  a  better 
handle  on  these  issues,  the  Society  for  Information 
Management  formed  an  alliance  with  the  Financial 
Executives  Institute  a  few  years  ago,  says  Aon  CIO 
June  Drewry,  who  was  SIM’s  international  president 
until  2000.  The  two  groups  meet  and  share  strategies. 

Despite  the  problems  inherent  in  their  traditional 
jobs,  CFOs  of  IT  are  undeterred.  In  fact,  a  growing 
number  of  them,  like  DHL’s  Zaichick,  are  taking  on 
expanded  IT  management  roles,  including  participa¬ 
tion  in  IT  benchmarking,  contract  negotiations  and 
software  licensing.  Meta’s  Rubin  describes  the  new 
role  this  way:  “You’re  not  the  teller  in  the  bank 
counting  the  dollars;  you’ve  become  a  financial  coun¬ 
selor  to  the  business.”  ©  49675 


A  COUNTING  LIFE 

m 

Paul  Costello  officially  retired  as 
the  CFO  of  IT  at  the  University  of 

Miami  on  May  31, 2003.  But  while 
he’s  less  involved  in  day-to-day 
budget  activities  as  a  twice-a-week 
special  projects  manager  for  the 

Coral  Gables,  Fla.-based  university, 
has  20-plus  years  of  experience  in 
active  in  overseeing  the  university’s 

Q&A 

Costello,  who 
his  role,  is  still 

IT  finances.  Computerworld ’ s  Thomas  Hoffman 
asked  Costello,  68,  to  share  his  insights. 

How  did  you  come  into  the  CFO  of  IT  role  at 
the  University  of  Miami?  In  1977,  I  went  to  the  uni¬ 
versity  as  a  bursar  in  charge  of  student  accounts  re¬ 
ceivables  based  on  my  experience  in  data  process¬ 
ing  and  my  previous  responsibility  for  a  $25  million 
accounts  receivable  environment.  After  three  or  four 
years,  [CIO]  Lew  Temares  asked  me  if  I  wanted  to 
get  into  DP  again,  and  I  did.  The  IT  finance  focus  be¬ 
came  an  increasingly  bigger  part  of  my  job,  even 
though  the  title  was  “director  of  administration  and 
budget.”  We  didn't  know  what  to  call  it. 


Do  you  run  into  political  battles  over  IT 
finance  issues?  Certainly,  there  are  political  situa¬ 
tions  and  competing  priorities  because  we  service 
administration,  faculty,  students  and  a  medical 
school.  Epjjpof  those  groups  brings  jlpMamf  focus 
to  what’s  appropriate  and  what’s  the  first  priority. 

How  do  you  allocate  resources?  In  terms  of 
prioritizing  applicatiorwPwQwinteiWwnd 
so  forth,  we  have  a  couple  of  steering  committees. 
They  work  primarily  within  the  ongoing  operational 
budget.  We  then  get  Lew  involved  to  look  at  that 
as  a  group.  Lew  and  the  project  sponsor  try  to  sell 
the  IT/business  projects  to  different  cfistituents, 


with  participation  from  the  IT  finance  side. 

Any  problems  creating  a  standardized  ap¬ 
proach  to  valuing  IT  investments?  Yeah,  it’s 
evolved  over  time.  [Laughs.]  Some  people  want 
to  know  how  quickly  we  get  payback,  others  want 
to  know  internal  rate  of  return,  others  ask  how  this 
will  reduce  costs,  others  ask  how  this  will  improve 
productivity.  There’s  no  single  measure.  But  if  you 
develop  a  history  of  not  having  cost  and  project- 
duration  overruns,  then  you  begin  to  get  credibili¬ 
ty.  What  gets  [more]  credibility  is  if  you  can  show 
the  business  need  or  how  a  particular  area  is  go¬ 
ing  to  be  dramatically  impacted  by  an  investment. 


Transparency  -  the  New  Engi 
of  Growth  and  Greatness 

Critical  reading  for  IT  professionals  and  managers.  Succeed  by  learning 
how  the  Internet  and  open  IT  architectures  enable  companies  to 
become  open  enterprises  -  in  turn  competing  and  performing  better. 


Reaction  from  business  leaders 

“Don  Tapscott  and  David  Ticoll  hit  the  bulls-eye  with 
The  Naked  Corporation.  The  demand  for  openness  and  candor  has  never 
been  greater.  The  Naked  Corporation  is  a  leadership  toolkit  for  turning  the 
relentless  demand  for  transparency  from  threat  to  advantage.” 

—  A.G.  Lafley,  Chairman,  President  and  Chief  Executive,  Procter  &  Gamble 

“They’ve  done  it  again.  Tapscott  and  Ticoll’s  capacity  to  combine  a  fresh 
and  authentic  perspective  with  real  world  data  has  once  again  opened  the 
aperture  on  our  emerging  networked  economy.  A  brilliant  work.” 

—  Dr.  Eric  Schmidt,  Chairman  and  CEO,  Google,  Inc. 

“A  rare  thing  these  days  -  a  business  book  with  a  profound  and 
important  new  idea.  The  Naked  Corporation  explains  how  a  new  force 
is  changing  the  corporation  and  competitiveness.  There  are  relevant, 
sometimes  jarring  insights  in  every  chapter.  And  what  a  great  read.” 

—  Indra  Nooyi,  President  and  CFO  of  PepsiCo,  Inc. 

“Tapscott  and  Ticoll  are  ahead  of  the  wave.  The  era  of  transparency  and 
all  its  implications  are  about  to  crash  down  on  corporations  everywhere. 
The  Naked  Corporation  is  the  first  survival  guide.” 

—  Paul  Taaffe,  Chief  Executive  Officer,  Hill  &  Knowlton 

“A  well-researched  and  timely  book.  The  authors  show 
how  trust  -  powered  by  broad  corporate  transparency  -  isn’t  just 
about  ethics,  it  is  about  success.” 

—  John  Chambers,  President  and  CEO,  Cisco  Systems 

“We  need  a  corporate  philosophy  for  the  21st  century. 

Tapscott  and  Ticoll’s  book  The  Naked  Corporation  provides  this  - 
not  only  the  rationale  for  a  transparent  corporation  but  also 
the  principles  of  leadership  in  an  open  world.” 

—  Klaus  Schwab,  Founder  and  President,  World  Economic  Forum 
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How  the  Age  of  Transparency 
Will  Revolutionize  Business 
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"The  Naked  Corporation  argues, 
beautifully  and  persuasively,  that  there 
is  no  contradiction  between  good  business 
and  the  values  of  honesty  and  openness. 
This  book  belongs  in  the  briefcase  of  every 
right-thinking  manager  in  the  country." 

—Malcolm  Gladwell,  author  of  The  Tipping  Point 


Media  Reaction 

“This  is  a  fresh  and  compelling  thesis, 
backed  up  by  some  persuasive  evidence.” 

-  BusinessWeek 


(This)  “big  idea  coherently  and  most 
convincingly,  combines  an  analysis  of 
the  recent  crisis  of  corporate  America 
with  a  celebration  of  the  technological 

re  volution...  a  wake  up  call.” 

-  The  Economist 


“Tapscott  and  Ticoll  produce  compelling 
evidence  that  transparency  is  an 
inevitable  social  phenomenon  and  that 
such  transparency  is  good.” 

-  Fast  Company 


Join  the  discussion  on  harnessing  transparency's  power  with  Don  Tapscott  at  www.AgeofTransparency.corn 
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gW  It’s  not 

mW  about  what 
happens;  it’s 
about  how  you 
respond  to  what 
happens. 

J.  GREG  HANSON,  assistant 
sergeant  at  arms  and  first  CIO 
of  the  U.S.  Senate 


Think  you’ve 
got  tough  cus¬ 
tomers?  J.  Greg 
Hanson  serves 
100  U.S.  sena¬ 
tors,  dozens  of 
committees 
and  staffs  in  50 
states.  And  about 
that  upcoming 
inauguration . . . 

About  a  year  and  a 
half  ago,  the  leader¬ 
ship  of  the  U.S.  Sen¬ 
ate  decided  to  raise 
theprofde  of  IT  at  the  Capitol.  They 
wanted  to  provide  direction,  update 
technology,  elevate  awareness  and 
improve  customer  service.  To  accom¬ 
plish  that,  they  invited  J.  Greg  Han¬ 
son  to  become  assistant  sergeant  at 
arms  and  the  Senate’s  first  CIO. 

“When  you  get  a  call  like  that, 
the  only  correct  response  is  yes,” 
Hanson  says. 

Since  then,  he  has  faced  many  of 
the  same  challenges  encountered  by 
CIOs  everywhere,  as  well  as  some 
that  are  unique.  Hanson  told  Kath¬ 
leen  Melymuka  about  his  job,  where 
“every  day  is  a  surprise.” 


www.computerworld.com 


You’re  the  CIO;  what  does  your  other  title 
mean?  In  the  Senate,  all  technology  is 
managed  out  of  the  sergeant  at  arms  of¬ 
fice,  so  I’m  an  assistant  sergeant  at  arms. 

Are  you  a  political  junkie?  No,  definitely 
not.  I’m  not  a  tech  junkie  either.  I’m 
interested  in  delivering  tools  and  solu¬ 
tions  to  help  senators  accomplish  their 
missions.  I  look  for  ways  to  use  tech¬ 
nology  to  solve  business  problems,  not 
for  technology’s  sake. 

What  kinds  of  positions  did  you  hold  previ¬ 
ously,  and  in  what  types  of  organizations? 

Prior  to  here,  I  was  CTO  at  Universal 
Systems  &  Technology,  a  high-tech 
company  in  Northern  Virginia.  Prior  to 
that,  I  was  CTO  at  Telos  Corp.  We 
grew  that  company  and  spun  off  some 
new  companies,  and  I  did  some  CIO 
work  in  some  of  the  subsidiaries.  Prior 
to  that,  I  had  a  20-year  career  in  the 
Air  Force,  and  I  was  in  technology 
the  entire  time. 

Some  CIOs  consider  themselves  technolo¬ 
gists  first;  others  consider  themselves  pri¬ 
marily  business  people.  Where  do  you  fall 
along  that  spectrum?  I’ve  got  very,  very 
deep  tech  expertise;  I’ve  got  a  Ph.D.  in 
computer  science.  But  in  my  entire  ca¬ 
reer  —  from  the  Air  Force  through  my 
time  in  the  commercial  world  —  it’s 
been  clear  to  me  that  technology  is  a 
tool.  It’s  a  wonderful  tool  that  can  give 
you  advantage  if  you  use  it  correctly, 
but  it’s  a  tool  to  make  bigger,  more  im¬ 
portant  things  happen.  I  consider  my¬ 
self  a  business  person  before  a  tech¬ 
nologist,  even  though  I  still  teach  a 
graduate  course  in  technology  at  the 
University  of  Maryland. 

How  big  is  the  Senate  IT  group?  I  have 
about  500  people  reporting  to  me.  Two 
hundred  fifty  to  300  are  full-time  gov¬ 
ernment  employees;  the  rest  are  con¬ 
tractors.  But  IT  at  the  Senate  is  even 
bigger.  To  get  it  done  right  requires  a 
team  that  also  includes  the  Rules  Com¬ 
mittee  and  the  Appropriations  Com¬ 
mittee  of  the  Senate.  And  every  sena¬ 
tor’s  office  has  a  small  tech  staff.  They 
report  to  the  senators,  but  they’re  also 
part  of  the  larger  tech  team  here. 

What  is  the  IT  group  responsible  for?  We’re 
responsible  for  the  entire  Senate  IT  in¬ 
frastructure,  all  the  networks,  all  the 
telecommunications,  information  pro¬ 
cessing,  storage,  front-  and  back-office 
applications  —  all  the  typical  things  a 
CIO  does.  We’re  also  very,  very  closely 
tied  to  continuity  of  operations,  and 
we  do  a  lot  of  planning  and  work  with 
our  counterparts  in  security.  We’re  re¬ 
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sponsible  to  see  that  the  Senate  has 
state-of-the-art  technology  and  to  look 
into  further  strategic  technology  and 
enterprise  architecture  and  how  that 
can  best  be  used  in  this  environment. 
So  I’ve  got  CTO  as  well  as  CIO  duties. 
It’s  a  dream  job. 

Is  your  position  in  any  way  political?  It’s  a 
federal  government  job,  but  it’s  not  po¬ 
litically  aligned,  and  it’s  completely 
nonpartisan. 

What  are  some  of  the  unique  aspects  of  your 
role  -  things  you  do  that  are  outside  the 
purview  of  other  CIOs?  I  get  to  do  great 
stuff.  When  we  have  elections  or  a 
transition  or  an  inauguration,  I  have  to 
support  them.  We  have  to  set  up  the 
offices,  provide  all  the  technology,  get 
the  systems  set  up,  train  the  staff,  sup¬ 
port  telephone  and  radio.  When  Presi¬ 
dent  Reagan’s  funeral  took  place,  we 
supported  that.  And  as  an  assistant 
sergeant  at  arms,  I  participate  in 
ceremonies  and  sometimes  escort 
dignitaries. 

What  are  some  of  your  top  priorities  as  CIO? 

Customer  service;  that’s  No.  1.  That’s 
tough  in  this  environment  because  I 
have  about  10,000  customers.  Equal  to 
that  is  security.  They  need  to  access  in¬ 
formation  anywhere  at  any  time. 

Next  is  strategic  planning:  looking 
over  the  bow  for  new  technology  and 
innovation,  staying  ahead  of  the  tech¬ 
nology  curve.  Technology  changes 
very  quickly,  and  senators  and  staff  see 
that  and  demand  excellent  technology. 
We  have  to  keep  it  all  lined  up  and 
facing  in  the  right  direction. 

Ten  thousand  customers?  I  thought  you  had 
100. 1  have  137  entities:  a  hundred  sen¬ 
ators,  all  the  committees  and  leader¬ 
ship  organizations,  the  sergeant  at 
arms  organization,  the  secretary  of  the 
Senate.  I  support  the  senators’  state  of¬ 
fices  as  well  —  their  infrastructure, 
help  desk,  telecom  requirements. 
When  you  add  all  the  staffs,  there  are 
about  10,000  people. 

In  many  companies,  the  business  executives 
form  an  IT  steering  committee  that  sets  pri¬ 
orities  for  IT  projects  and  spending.  Is  there 
anything  similar  in  the  Senate?  We  use  a 

combination  of  the  Senate  leadership 
organization,  plus  the  Rules  and  Ap¬ 
propriations  committees,  plus  my  or¬ 
ganization.  Rules  sets  policy  and  pro¬ 
cedures.  We  build  budgets,  but  Appro¬ 
priations  has  to  bless  that.  The  Senate 
leadership  gives  me  oversight,  and 
there  are  organizations  of  system  ad¬ 
ministrators  and  administrative  man¬ 


agers,  and  I  get  input  from  them  on  a 
constant  basis,  as  well  as  from  technol¬ 
ogy  working  groups. 

What  are  some  of  your  big  challenges? 

When  I’m  trying  to  do  a  big  project,  I 
try  to  gain  consensus,  and  that’s  a  chal¬ 
lenge.  There’s  also  the  challenge  of 
being  in  the  public  eye  and  the  chal¬ 
lenge  of  special  events.  We  have  the 
regular  day-to-day  work,  and  then 
there’s  a  special  event  and  there’s  a 
surge,  and  we  have  to  set  up  transition 
offices  or  work  a  state  funeral  in  addi¬ 
tion  to  all  the  day-to-day  stuff. 

There’s  the  challenge  of  strategic 
planning.  I  have  137  entities.  Each  has 
an  idea  of  where  we  should  head  in 
technology  strategy,  and  I  have  to  take 
all  that  into  account. 

There’s  the  challenge  of  getting  con¬ 
sistent,  workable  requirements.  I  can’t 
wait  around  forever  to  get  require¬ 
ments,  or  the  technology  will  jump  out 
from  under  me.  So  we  go  with  innova- 


ROLL  CALL 

CIO  J.  Greg  Hanson’s  10,000 
customers  include  the  following: 

100 

U.S.  senators  and 

their  staffs,  both  in 
Washington  and  in 
their  home  states 

16 

Senate  standing 
committees  from 
Agriculture,  Nutrition 
and  Forestry  to  Vet¬ 
erans'  Affairs 

4 

Special/select 
committees,  such 
as  the  Select  Com¬ 
mittee  on  Ethics  and 
the  Special  Commit¬ 
tee  on  Aging 

4 

Joint  committees, 

such  as  those  on 
printing  and  taxation 

8 

Leadership  orga¬ 
nizations,  such  as 
those  of  majority  and 
minority  leaders 

5 

Senate  officers 
and  their  staffs: 

■  Sergeant  at  arms 

■  Secretary  of  the 

Senate  ■  Chaplain 

■  Majority  secretary 

■  Minority  secretary 
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tion,  rapid  prototyping,  small  pilots. 
We’ll  put  something  in  there  real  quick 
and  try  it  on  one  office,  and  if  they  like 
it,  maybe  others  will.  We  have  to  think 
big,  start  small  and  scale  fast. 

CIOs  sometimes  complain  that  their  busi¬ 
ness  executives  are  technically  illiterate. 

How  tech-sawy  is  the  average  senator? 

The  senators  I’ve  worked  with  are  very 
tech-sawy.  They  have  cell  phones, 
PDAs,  BlackBerries.  They  operate 
computers.  They  know  how  to  do  this 
stuff.  They  also  know  what  they  need 
to  get  their  jobs  done,  and  they  know 
the  technology  is  there  to  do  it. 

What’s  the  toughest  part  of  your  job? 

Trying  to  merge  requirements  from  so 
many  entities  into  something  that  you 
can  deliver  that  will  scale  and  be  cost- 
effective  and  apply  to  everyone.  Trying 
to  make  everyone  happy  with  137  dif¬ 
ferent  customers  to  satisfy.  That  forces 
me  to  consider  a  lot  of  different  op¬ 
tions  and  choices.  For  example,  not  all 
senators  want  e-mail  the  same  way. 
There  are  choices  and  options  out 
there,  and  they  know  about  them.  So 
they  won’t  just  take  what  I  offer.  I  have 
to  figure  out  a  way  to  get  it  all  to  mesh 
to  one  set  of  requirements  that’s  cost- 
effective  and  I  can  support. 

How  will  your  performance  be  measured? 

In  terms  of  customer  satisfaction.  I  do 
a  formal  survey  every  year.  It’s  in  proc¬ 
ess  now.  It’s  not  a  little  thing  with  an 
e-mail  questionnaire.  We  sit  down  or 
get  on  the  phone  with  each  office  and 
get  responses.  We  hear  it  directly  — 
warts  and  all.  My  performance  will 
also  be  measured  by  our  ability  to  re¬ 
spond  to  unforeseen  events  and  by  the 
ability  of  senators  to  communicate 
anywhere,  anytime,  under  any  circum¬ 
stances.  It’s  not  about  what  happens; 
it’s  about  how  you  respond  to  what 
happens. 

What’s  been  your  most  memorable  day  so 
far?  I  had  been  here  maybe  a  month, 
and  I  was  called  into  a  senator’s  office 
by  the  senator  himself,  and  I  got  royally 
chewed  out.  We  were  in  the  process  of 
migrating  e-mail  accounts  and  had  mi¬ 
grated  his  to  a  new  system.  We  had 
done  a  wonderful  job  on  the  migration 
but  not  on  the  customer  care  part.  He 
gave  it  to  me  good.  And  I  couldn’t  help 
thinking:  I’m  standing  in  our  nation’s 
Capitol  being  chewed  out  by  a  U.S.  sen¬ 
ator.  He’s  spending  his  time  being  con¬ 
cerned  about  this.  When  I  walked  out  of 
there,  I  was  as  happy  as  I  could  be,  be¬ 
cause  I  thought,  “This  is  something  I 
can  fix.”  ©  49666 
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The  2004  Wall  Street  Journal/Harris  Interactive 
Business  School  Survey  of  2,849  MBA  recruiters  recently  ranked 
the  top  U.S.  business  schools.  The  findings: 
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I’ve  been  in  the  credit  management  field 
for  10  years,  but  I’m  considering  a  midlife 
career  change  to  be  an  IT  instructor.  Can 
you  give  me  some  advice  on  the  market 
prospects?  While  the  technical  training  and 
executive  education  industry  has  exploded  in 
the  past  five  years,  I've  been  amazed  at  the  limit¬ 
ed  amount  of  experience  that  instructors  tend  to 
have.  A  value-added  training  opportunity  can 
come  in  two  forms:  on-the-job  training  and  a 
well-organized  and  -managed  classroom  expe¬ 
rience  from  an  instructor  who  has  real-world  ex¬ 
perience.  It  sounds  like  you  could  contribute  to 
the  latter. 

The  market  generally  doesn’t  pay  well, 
whether  you're  training  or  providing  instruction 
in  a  more  formal  academic  environment.  How¬ 
ever,  the  intrinsic  benefits  of  changing  people’s 
lives  and  growing  theircapabilities  can't  be  val¬ 
ued  in  dollars.  There  are  plenty  of  jobs  out  there 
in  this  arena,  so  go  for  it.  A  riskless  approach  to 
diving  in  may  be  to  accept  a  part-time,  evening 
instruction  role  that  would  allow  you  to  feel  out 
the  industry  and  the  classroom  setting. 


Are  there  still  good  opportunities  for 
mainframe  design  and  development?  I’ve 
spent  the  past  10  years  working  with 
midrange  software  and  infrastructure.  I’d 
like  to  return  to  the  mainframe  world,  but  I 
don’t  want  to  take  a  big  cut  in  pay.  Is  this 
possible?  I’m  not  sure  that  I  would  recommend 
this  move,  especially  if  your  paycheck  is  a  priori¬ 
ty.  Keep  in  mind  that  pay  is  directly  correlated  to 
your  depth  of  experience  in  a  specific  niche  (fi¬ 
nancial  services  or  manufacturing,  for  example) 
and  specific  set  of  technologies.  The  mainframe 
world  is  static  -  you  rarely  get  boosts  in  pay  for 
niche  experience.  This  is  mostly  because  large, 
transactional  environments  tend  to  be  operating 
on  older  business  models  that  don’t  evolve  as 
rapidly  and  don't  require  sexy  newtechnology 
enhancements  to  enable  them. 

I  have  two  employees  who  work  for  me  in 
Mexico.  I  visit  the  plant  at  least  once  a 
week,  but  when  I’m  not  there,  my  employ¬ 
ees  take  advantage  of  my  absence  to 
leave  early,  take  long  lunches  and  so  on.  I 
get  complaints  of  lengthy  wait  times  for 
problems.  What  are  some  suggestions? 
Quite  simply,  they  need  to  be  terminated.  That 
usually  presents  a  long  list  of  human  resource  is¬ 
sues  to  overcome,  but  it’s  worth  your  time  now 
to  create  a  weli-documented  action  plan  for 
both  employees.  If  you  don’t  already  have  a  long 
list  of  key  performance  indicators,  I  would  start 
with  that  and  include  it  in  the  action  plan.  You 
should  be  able  to  measure  the  employees’  pro¬ 
ductivity  against  those  indicators,  and  if  the  em¬ 
ployees  are  falling  short  of  the  goals,  they  can 
and  should  determinated. 

I’ve  had  the  opportunity  to  manage  many  re¬ 
mote  employees,  and  I  find  that  it  takes  a  special 
kind  of  workerto  make  it  successful.  You  need 
a  self-starter  who  doesn’t  need  hand-holding 
and  who  appreciates  the  opportunity  for  a  little 
autonomy.  You  may  be  able  to  trade  up  fortwo 
employees  (or  even  one,  depending  on  how  un¬ 
productive  they  are)  who  have  more  experience 
and  will  accept  the  same  pay  just  because  they 
want  the  opportunity  to  work  independently.  It's 
a  tough  challenge;  good  luck!  ©  49665 


Small  Companies  Gearing  Up 

Which  best  describes  the  current  status  of  your  full-time  IT  staff? 


Companies  with  20,000 
or  more  employees 
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Companies  with  5,000 
to  19,999  employees 
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Companies  with  1,000 
to  4,999  employees 
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Companies  with  six 
to  999  employees* 


BASE:  867  technology  decision-makers  at  North  American  companies;  *1,002  technology  decision-makers  at  small  North  American  !  ®  HIRING  ■  CUTTING 

companies.  Percentages  may  not  total  100  because  ol  rounding.  SOURCE:  Forrester  Research  Inc.,  September  2004  I  ■  FLAT  ■  DONT  KNOW 


The  Morphing  CIO 

The  role  of  the  CIO  continues  to  evolve 
beyond  the  scope  of  traditional  IT,  ac¬ 
cording  to  a  recent  Meta  Group  Inc. 
study  called  “Driving  the  Business  Val¬ 
ue  With  IT.”  Of  126  IT  decision-makers 
surveyed,  only  58%  said  they  believe 
their  scope  of  responsibility  is  that  of 
a  “traditional  CIO.”  More  than  40% 
indicated  that  their  jobs  include  other 
business  functions,  from  facilities  to 
HR,  and  29%  specifically  said  their  jobs 
include  responsibility  for  leading  or 
supporting  business  transformation. 
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EVENTS 


Competitive 

Intelligence 

■  Oct.  28-29,  Boston 

Sponsor:  Institute  for  International 

Research 

Competitive  Technical  Intelligence 
2004  explores  tools  and  tech¬ 
niques  for  using  business  intelli¬ 
gence.  Topics  include  improving 
your  odds,  linking  CTI  to  customer 
needs,  leveraging  new  analysis 
and  collection  techniques,  and 
anticipating  opportunities. 
www.iirusa.com/cti/ 


Business  Process 
Management 

■  Nov.  3-4,  New  York 
Sponsor  BrainStorm  Group  Inc. 

The  sixth  annual  Business  Process 
Management  Conference  includes 
both  business  and  IT  tracks  with 
presentations,  case  studies  and 
best  practices.  Topics  include 
process  modeling,  analysis  and 
design;  process  ownership  and 
change  management;  and  rules- 
driven  BPM. 

www.brainstorm-group.com/ny/ 

04bpmbrochure.pdf 


Executive  Coaching 

■  Nov.  8-9,  New  York 
Sponsor:  The  Conference  Board  Inc. 

The  2004  Executive  Coaching 
Seminar  offers  presentations  on 
topics  including  changing  the  rules 
of  the  global  game;  the  ethical  chal¬ 
lenge  to  U.S.  business;  and  what’s 
coachable,  what’s  not. 
www.conference-board.org/ 
coaching.htm 


World  Business 
Forum 

■  Nov.  17-18,  Chicago 
Sponsor:  The  HSM  Group  Ltd. 

The  conference  includes  political, 
academic  and  practical  viewpoints 
from  speakers  including  Jack  Welch, 
Madeleine  Albright  and  Larry  Bos- 
sidy  on  leadership,  organization, 
financial  markets,  innovation,  exe¬ 
cution,  resilience  and  growth. 

www.wbfchicago.com 


Development 
Drop-Down  Budgeting 


BART  PERKINS 


MANY  COMPANIES  are  beginning  to 

increase  their  budgets  for  new  IT  de¬ 
velopment.  Unfortunately,  they  often 
underestimate  ongoing  production 
costs  —  the  “drop-down”  costs  from 
development  efforts.  A  realistic  IT  budget  must  plan  for 
a  project’s  support  after  it’s  installed.  Drop-down  costs 
include  a  portion  of  the  infrastructure  support  expens¬ 
es  for  the  new  system,  such  as  servers,  WANs/LANs 


and  desktops.  They  also  in¬ 
clude  ongoing  software  li¬ 
cense  fees  and  production 
support  staff  (production 
control,  security,  database 
administration,  help  desk). 

These  costs  automatically 
drop  down  into  future  oper¬ 
ating  expenses,  whether  they 
are  budgeted  or  not. 

Underestimating  these 
drop-down  costs  is  a  ram¬ 
pant  problem,  partly  because 
many  IT  managers  are  rusty, 
not  having  had  the  luxury  of 
budgeting  for  new  develop¬ 
ment  for  a  while.  I  recently 
found  that  several  Fortune 
500  clients  had  underesti¬ 
mated  these  costs  by  $40  mil¬ 
lion  to  $50  million  per  year. 

Be  sure  to  examine  your  drop-down 
costs  carefully,  especially  if  your  organi¬ 
zation  has  focused  primarily  on  mainte¬ 
nance  for  the  past  few  years. 

The  following  phrases  (often  heard  in 
budget  reviews)  are  drop-down  myths 
and  should  raise  a  red  flag: 

“We  already  own  the  server,  so  it’s  free.” 
Your  current  infrastructure  may  have 
enough  excess  capacity  for  several  addi¬ 
tional  applications.  But  when  you  reach 
its  limit,  the  next  new  application  will 
require  a  major  infrastructure  upgrade. 
Good  budgeting  spreads  the  cost  of  addi¬ 
tional  infrastructure  equitably,  without 
forcing  the  new  application  to  bear  the 
entire  cost  of  the  required  infrastructure 
purchases. 


“We  are  replacing  an  existing 
application,  so  the  cost  will  be  the 
same.”  Most  new  systems  of¬ 
fer  more  functionality,  sup¬ 
port  more  users  and  store 
significantly  more  data  than 
the  applications  they  re¬ 
place,  resulting  in  additional 
production  costs.  (More¬ 
over,  many  applications  nev¬ 
er  totally  disappear.) 

“We  are  becoming  more  effi¬ 
cient,  so  we  can  absorb  it  into 
the  existing  budget.”  During 
the  Internet  boom,  many 
companies  acquired  large 
amounts  of  technology  but 
never  implemented  planned 
systems.  As  a  result,  they 
had  excess  capacity.  After 
the  Internet  bust,  these 
same  companies  focused  on  efficiency 
(a  discipline  lost  during  the  boom)  by 
consolidating  servers,  rationalizing  soft¬ 
ware  and  redesigning  their  networks. 

As  a  result  of  these  efforts,  they’ve  had 
to  absorb  only  limited  drop-down  lately. 
Excess  capacity  will  eventually  be  ab¬ 
sorbed,  however,  and  there  won’t  be  any 
fat  left  to  trim. 

“We  are  funding  major  new  development 
efforts,  but  our  budget  will  remain  flat.”  Some 
IT  organizations  prefer  to  ignore  drop¬ 
down  costs  as  long  as  possible  because 
of  corporate  and  political  pressures.  But 
bad  news  doesn’t  get  better  with  age,  and 
the  drop-down  costs  will  eventually  ap¬ 
pear  as  budget  overruns. 

Drop-down  costs  should  be  included 


in  the  business  case  for  any  new  system, 
but  since  the  case  may  have  been  written 
several  years  ago,  the  numbers  could  be 
outdated.  Before  you  transfer  this  data 
into  your  budget,  make  sure  the  esti¬ 
mates  are  still  realistic.  In  addition,  since 
most  applications  run  for  many  years, 
costs  can  change  significantly  over  time. 
Create  a  rough  estimate  for  drop-down 
costs  and  refine  it  annually. 

To  increase  the  accuracy  of  your  drop¬ 
down  estimates,  try  the  following: 

■  Compare  them  against  industry 
norms  as  a  reality  check.  Gartner  Fellow 
Bruce  J.  Rogow  reports  from  recent  vis¬ 
its  with  CIOs  that  drop-down  costs  run 
between  28%  and  35%  of  the  cost  of  de¬ 
veloping  the  new  system  (regardless  of 
whether  it’s  custom  code  or  a  purchased 
package).  Costs  are  somewhat  lower  on 
projects  to  replace  existing  systems,  but 
review  your  assumptions  carefully. 

■  Leverage  your  accounting  data.  Use 
it  to  create  accurate  production  cost  esti¬ 
mates  or  to  validate  your  outsourcer’s 
numbers. 

■  Track  your  drop-down  history.  Eval¬ 
uate  recently  installed  applications  to 
determine  actual  production  costs.  Over 
time,  you’ll  develop  increasingly  accu¬ 
rate  estimates  for  your  environment. 

■  Develop  rigorous  capacity  planning. 
The  business  case  or  preliminary  prod¬ 
uct  design  should  provide  realistic  esti¬ 
mates  of  the  number  of  users,  daily 
transaction  volumes,  database  sizes,  etc. 
This  data  enables  detailed  modeling  to 
accurately  forecast  ongoing  production 
costs.  If  you’re  buying  an  established  ap¬ 
plication  package,  the  vendor  should  be 
able  to  help  you  with  this  modeling. 

Accurate  estimates  of  drop-down 
costs  prevent  nasty  budget  surprises 
later.  If  you  ignore  these  unavoidable 
expenses,  they  will  slowly  consume  the 
budget  you  have  (finally!)  acquired  for 
new  development.  Protect  your  future 
development  dollars  by  accurately  bud¬ 
geting  for  drop-down.  ©  49668 
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b*rt  perkins  is  managing 
partner  at  Leverage  Part¬ 


ners  Inc.  in  Louisville, 
Ky„  which  helps  CIOs 
manage  their  IT  suppli¬ 
ers.  He  was  previously 
CIO  at  Tricon  Global 
Restaurants  Inc.  and 
Dole  Food  Co.  Contact 
him  at  BartPerkins® 
LeveragePartners.com. 


GEAC  ENTERPRISE 
SOLUTIONS,  INC. 

Senior  Technical 
Support  Engineer  II 

Geac®  (TSX  GAC)  is  a  global 
enterprise  software  company  for 
Business  Performance  Manage¬ 
ment,  providing  customers 
worldwide  with  the  core  financial 
and  operational  solutions  and 
service  to  improve  their  busi¬ 
ness  performance  in  real  time. 

Geac  Enterprise  Solutions  Inc., 
is  seeking  qualified  candidates 
for  the  postion  of  Senior  Tech¬ 
nical  Support  Engineer  II  to  be 
responsible  for  upgrading  and 
executing  releases  for  foreign 
and  domestic  clients.  Analyze 
and  provide  solutions  for  client 
system  issues;  perform  custom¬ 
ization  to  meet  client's  needs. 
Work  with  escalations  and  prod¬ 
uct  engineers  to  provide  resolu¬ 
tion  of  complex  non-reproduc- 
tive  failures  and  customer  re¬ 
ported  issues.  Interface  with 
Professsional  Services  to  pro¬ 
vide  cross-functional  solutions. 

Requires:  Bachlor's  degree,  or 
its  equivalent  experience  in 
Comp.  Sci.,  M.I.S.  or  Electrical 
Eng.,  and  experience  in  client 
server  devlopment  and  consult¬ 
ing.  Also  requires  expertise  in 
network  technology  such  as 
TCP/IP,  ICMP,  SSC  and  FTP; 
BEA,  Tomcat  and  Apache  appli¬ 
cation  servers;  and  Java  Tech¬ 
nologies  such  as  J2EE,  RMI, 
CORBA  and  Servlets. 

To  apply  for  this  position  please 
send  your  resume  to 
aeac.iobs@Qeac.com  or  visit 
our  website  at  www.geac.com. 


Consulting  Engineer  wanted  to 
manage  &  perform  consulting 
projects,  as  well  as  write  &  sell 
consulting  projects,  specifically 
targeted  towards  the  chemical, 
materials,  bio-medical,  foods, 
metals,  plastics  &  semi-conduc¬ 
tor  industries;  write  proposals  & 
reports;  negotiate  contracts  & 
agreements;  set  up  &  solve  CFD 
problems  in  projects;  report  on 
technical,  schedule  &  cost  per¬ 
formance;  make  presentations 
to  clients;  participate  in  high 
tech  marketing  activities  for  the 
chemical  &  materials  industries 
by  preparing  sales  examples, 
writing  &  presenting  technical 
papers,  participating  in  the  ap¬ 
propriate  professional  societies 
&  institutional/industrial  consor¬ 
tia  &  orgs.  &  building  partner 
relationships;  maximize  efficien¬ 
cy  of  consulting  project  perf.  by 
maximizing  team  eng.  utilization 
as  well  as  utilization  of  foreign 
office;  organize  review  mtgs.  to 
discuss  tech.  &  commercial  as¬ 
pects  of  &  risk  analysis  of  client 
leads;  manage  deadlines  &  cli¬ 
ent  expectations;  contribute  to 
marketing  activities;  devise  stra¬ 
tegies  for  working  with  key  re¬ 
peat  clients.  Must  have  PhD  in 
Chem.  or  Mech.  Eng.  w/  special¬ 
ization  in  CFD,  &  2  yrs.  CFD 
exper.,  incl.  use  of  CFD  technol¬ 
ogy  to  solve  applications  prob¬ 
lems  for  the  chem.  &  material 
industries,  &  at  least  1  yr.  exper. 
using  commercial  CFD  software 
products  &  managing  the  cost  & 
scheduling  of  consulting  pro¬ 
jects.  (A  Master's  deg.  in  Chem. 
or  Mech.  Eng.  &  5  yrs.  stated 
exper.  can  substitute  for  above 
reqts.)  Salary  $71 ,195/yr.  Send 
2  resumes  to  Job  Order  #2004- 
897,  P.O.  Box  989,  Concord,  NH 
03302-0989. 


Software  Engineer  (Multiple 
Positions).  Design  &  imple¬ 
ment  internet  &  intranet 
business  app.  By  using 
NET,  ASP.NET  Platform, 
XML,  ActiveX,  DCOM,  Ja¬ 
vaScript  and  Visual  Basic 
Script.  Req:  Bachelor  in 
Comp.  Sci.,  Comp.  Eng.,  or 
Electrical  Eng.  40hrs/wk. 
Job/Interview  Site:  Tor¬ 
rance,  CA.  Send  resume  to 
BQE  Software,  Inc.  @  2601 
Airport  Dr.,  #380,  Torrance, 
CA  90505. 


Senior  Software  Engineer  (Den¬ 
ver,  CO)  -  Using  object  oriented 
design  principles;  Java,  VXML 
mark-up  lang.;  Web  Logic  tools; 
Oracle  database  tools;  Unix  & 
Microsoft  Windows  NT  operating 
sys.;  &  Sun  Microsystems  ser¬ 
vers:  Consult  w /  business  cus¬ 
tomers  concerning  software  & 
website  needs.  Analyze/design/ 
develop/code/test  databases; 
websites;  interactive  voice  re¬ 
cognition  software,  e-business 
internet  transactions  software  & 
other  software  applications  to 
meet  customer's  needs.  Req. 
Bachelor's  in  Comp.  Sci.,  related 
field  or  equiv.  exp.  Five  yrs.  exp. 
in  software  dev.,  including  2  yrs. 
exp.  in  website  dev.;  proficiency 
in  Object  oriented  database  de¬ 
sign/website  design,  detailed 
working  knowledge  of  interactive 
voice  recognition  software  dev., 
Siebel  PRM  software,  Java, 
VXML,  Web  Logic  tools,  Oracle 
Database  tools,  Unix  operating 
system,  Sun  Microsystems  ser¬ 
vers,  &  Microsoft  Windows  NT;  & 
Java  certification.  8-5,  M-F, 
$82K/yr.  Apply  by  resume  only 
to  Workforce  Development  Pro¬ 
grams,  P.O.  Box  46547,  Denver, 
CO  80202,  refer  to  job  order 
number  CO5093365. 


Blackbaud,  The  leading  end-to- 
end  data  management  and  tech¬ 
nology  solutions  provider  for  the 
nonprofit  community,  offering 
software,  services  and  e-solu¬ 
tions,  is  seeking  a  Senior  Solu¬ 
tions  Engineer  based  in  Charle¬ 
ston,  South  Carolina  to  position, 
quality,  investigate  and  demon¬ 
strate  Blackbaud’s  Business  In¬ 
telligence  Software  Solutions 
through  an  understanding  of  the 
technical  architecture  and  of 
Visual  Basic  for  Applications 
(VBA),  SQL  Server,  Analysis 
Services  and  relational  databas¬ 
es  including  SQL.  Requirements 
are  a  Master’s  degree  in  Comp¬ 
uter  Information  Systems,  Eng¬ 
ineering  or  a  closely  related  field 
plus  two  years  of  experience  as 
a  Software  Sales  Engineer,  Soft¬ 
ware  Product/Marketing  Manag¬ 
er  or  Software  Consultant.  Ex¬ 
perience  must  include  experi¬ 
ence  implementing  business  in¬ 
telligence  software.  Must  include 
experience  with  SQL  Server,  An¬ 
alysis  Services,  Visual  Basic  for 
Applications  and  relational  data¬ 
bases  including  Structural  Query 
Language  (SQL).  If  interested, 
please  submit  resume  to:  Black¬ 
baud  Recruiting  -  AK,  2000 
Daniel  Island  Dr.,  Charleston, 
SC  29492. 


Comp.  Engr.:  Parallel  Sci. 
Computing  (Beowulf  Clus¬ 
ter,  C/C++/F77,  MPI);  paral¬ 
lelize  seq./dvlp.  new  parallel 
Numer.  Methods  code  for 
Meso2D/Full  Wave  Models 
Simulations  (NSF  Gravity 
waves  Rsrch);  ext.  to  3-D  ; 
r/t  visualization;  Cluster 
Inst./maint.  Requires:  M.S. 
Comp.  Sci.  &  2  yrs.  exp.  in 
job  or  equiv.  educ.  Comp 
Salary.  Send  resume  to: 
ERAU,  Univ.  Attorney,  600 
S.  Clyde  Morris  Blvd., 
Daytona  Bch.,  FL  32114. 


Software  Engineers  to  analyze, 
design,  develop,  test  appls  us¬ 
ing  Java,  JSP,  Servlets,  EJB, 
XML,  HTML,  JavaScript,  C, 
C++,  Oracle  etc  under  UNIX, 
Windows  OS;  provide  architec¬ 
tural  support,  create  and  inte¬ 
grate  product  data  stores  into 
Siebel  product  module;  perform 
Siebel  CRM  implementations 
and  install  Siebel  servers/ 
clients;  Develop,  enhance  com¬ 
ponents  of  new/existing  appls 
and  databases;  interact,  train 
end  users.  Require:  M.S.  in  CS 
or  Engineering  (any  branch)  with 
1  yr  exp  in  Siebel  F/T.  Travel 
involved.  Competitive  salary. 
Resume  to:  HR,  ABZ  Consult¬ 
ing,  Inc.,  2600  Century  Parkway, 
Ste  100,  Atlanta,  GA  30345. 


S/W  Engrs,  Progmr  Anlyts,  Sys¬ 
tems  Analysts,  for  MA  based  IT 
firm.  Need  Bach  +1  yr  exp  for  Jr. 
Level  pos’s  &  Mast.  +1  yr.  Bach 
+  5  yrs  of  exp  for  Sr.  Lvl  posit’s. 
Var.  skills  req:  Statistical  S/W 
(SAS),  PERL, ERWIN,  C,  C++, 
VC++,  iplanet,  ASP,  DHTML, 
JavaScript,  Sybase,  Oracle, 
SQLServer,  Business  Objects, 
Crystal  Rpts.,  Windows  server 
2003,  IINUX,  IIS,  UNIX,  Sun 
Solaris,  CISCO,  PL/SQL,  Cog- 
nos,  Brio,  Netscape  enterprises 
server,  Coldfusion,  data  model¬ 
ling,  e-business  intelligence, 
cics,  db2,  peoplesoft,  jded- 
wards,  power  builder,  CRM, 
VB,  .NET,  SAP,  j2ee,  jsp,  Jdbc, 
ejb,  web  sphere,  web-logic. 
Apply  w/2  copies  of  resume  to 
H.R.Dept,  Corporate  Computer 
Services  Inc.  80  Tower,  Office 
Park,  Woburn,  Ma  -  01801. 


Experts,  Inc  is  looking  for: 

Systems  Analysts:  Master's  de¬ 
gree  in  computer  Science/relat¬ 
ed  field  with  One  year  experi¬ 
ence  in  the  following:  Oracle, 
Microstrategy,  Cognos  !WR,  in- 
formatica,  PowerCenter,  Power 
Mart  and  Java  Technologies. 

Programmer  Analysts:  Bachel¬ 
or's  degree  in  computer  science/ 
related  field  with  5  years  pro¬ 
gressive  exp.  in  any  five  of  the 
following  skills  JAVA,  J2EE, 
XML,  Struts,  ANT,  JBuilder.  Peo- 
pleSoft,  SAP  R/3.ABAP,  SAP 
Basis  Admin,  SAP  BIW,  ORA¬ 
CLE,  PL/SQL,  Actuate  Reports. 

QA  Tester:  Bachelor's  degree  in 
computer  science/related  field 
with  5  years  progressive  exp.  in 
the  following:  Automation  Test 
toois,  Win  Runner,  Load  Runner, 
Test  Director  and  Rational  Tools. 

We  accept  foreign  education 
equivalent  of  the  degree,  or 
the  degree  equivalent  in  edu« 
cation  and  experience. 

Send  Resume  to  Expertsinc  804 
N  Meadow  Brook  Dr,  Suite 
#120,  Olathe  KS  66062. 


BCC  USA,  Inc  -  South  Portland, 
ME  needs  experienced  Prog¬ 
rammer  Analyst  having  a  Bach¬ 
elors  degree  with  minimum  two 
years  of  progressive  work  expe¬ 
rience  in  Oracle  9i/8i/8.x/7.x, 
Oracle  9iAS,  Forms  9i/6i/5.0/4.5, 
SQL*Loader,  Reports  9i/6i/3.0/ 
2.5,  PL/SQL,  SQL,  PL/SQL  Web 
Toolkit,  Discoverer  9i/4i,  Actuate, 
MQ  Series,  Shell  scripts,  Perl, 
Java,  JDBC,  and  JavaScript. 
Should  be  expert  in  tuning  SQL 
queries  using  Explain  plan, 
SQL*Trace  and  TKPROF  utility. 
Should  also  have  some  experi¬ 
ence  in  Oracle  Database  Ad¬ 
ministration. Competitive  salary 
and  benefits.  M-F,  40  hours/ 
week.  Please  mail  your  resume 
to  BCC  USA  Inc.,  HR  Depart¬ 
ment,  650  Main  Street  Suite 
201,  South  Portland,  ME  - 
04106. 


BCC  USA  Inc  -  South  Portland, 
ME  needs  experienced  Pro¬ 
grammer  Analysts  having  a 
Bachelors  Degree  with  minimum 
two  years  of  progressive  experi¬ 
ence  in  Analysis,  Design,  Dev¬ 
elopment,  Testing  and  Imple¬ 
mentation  of  Java  /  J2EE  based 
applications  using  JSP,  Servlets, 
Applets,  Java  Swing,  EJB,  JD¬ 
BC,  JNDI.JAXB,  JMS,  WSAD, 
WebLogic,  Websphere,  Struts 
(MVC)  Framework,  XML,  XML- 
Spy,  XSL,  Oracle, DB2.MQ  Ser¬ 
ies,  UML(Rational  Rose),  RUP 
(Rational  Unified  Process), 
ClearCase,  Ant,  Erwin,  Load 
Runner,  JUnit,  Unix  (shell  script¬ 
ing).  Must  have  experience  in 
implementing  RUP  methodolo¬ 
gy.  Competitive  salary  and  ben¬ 
efits.  M-F,  40  hours/week. 
Please  mail  your  resume  to  BCC 
USA  Inc.,  HR  Department,  650 
Main  Street  Suite  201,  South 
Portland,  ME  -04106. 
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Software  Engineer  w/Mas- 
ters  or  foreign  equivalent 
in  Comp.  Scie.  or  Engg  or 
Math  +  1  yr  exp  in  using 
Share  Point  2003,  C#, 
VB.NET,  ASP.NET,  Front 
Page  2003,  Win  2003, 
ASP,  XML,  HTML,  DHTML, 
JavaScript,  Visual  Basic, 
COM/COM+,  UML,  Visual 
SourceSafe,  Sybase  & 
SQL  Server.  Mail  Res  to: 
Open  Systems  Technolo¬ 
gies,  Inc.  8  Winter  Street, 
6th  Floor,  Boston,  MA 
02108. 


Programmer  Analysts  to  ana¬ 
lyze,  design,  test,  implement 
and  maintain  software  systems 
in  client  server  envir  using  C, 
Java,  HTML.  VB,  ORACLE.  MS 
Access,  etc  under  Windows, 
UNIX  OSs;  write  documentation 
to  describe  program  develop¬ 
ment  and  logic;  perform  onsite/ 
offsite  maintenance,  debugging, 
testing,  and  code  optimization. 
Require:  BS  or  foreign  equiv  in 
CS/Engineering  (any  branch) 
with  2  yrs  exp  in  IT  Competitive 
salary,  F/T,  travel  involved 
Resume  to  HR,  Ordusion 
Technologies,  Inc.,  3883  Rogers 
Bridge  Road,  Suite  504,  Duluth, 
GA. 


Sys.  Analyst:  Use  OOA 
to  design  &  dev.  sys  apps 
based  on  Use  Cases  & 
Req.  using  VC++  w/MFC 
to  dev.  med-lrg  bus.  apps. 
Req:  BS  comp  sci  &  4  yrs 
OOD  using  MFC  including 
full-cycle  RAD  develop, 
methods  w/med-lrg  bus. 
apps  &  SQL.  Resumes  to: 
B.  Silverman,  VCG,  Inc., 
1805  Old  Alabama  Rd., 
Ste  250,  Roswell,  GA 
30076. 


Software  Engineers/ 
Systems  Analysts  for 
s/w  co  in  Chicago, 
IL.  Must  have  Bach’s 
in  Comp  Sci/Comp 
Eng  or  reltd  field  &  1- 
3  yrs  exp.  Send 
resume  to:  U&X 
Group,  1000  Route 
9N,  Woodbridge,  NJ 
07095. 


Manager,  DCP  Software  Devel¬ 
opment  -  Manage  the  design, 
development  and  implementa¬ 
tion  of  Dynamic  Charging  Plat¬ 
form  Software  Systems;  man¬ 
age  the  installation  of  Sun  Box¬ 
es  and  HP  Unix  Boxes  to  create 
a  stand  alone  environment  sup¬ 
porting  the  development  of  DCP 
compatible  software;  define  and 
develop  DCP  systems  require¬ 
ments  for  customized  clients’ 
systems;  manage,  train  and  re¬ 
cruit  software  development  pro¬ 
fessionals  with  regard  to  DCP 
development  utilizing  C++  with 
C/C++,  including  but  not  limited 
to  the  development  of  real-time 
performance  critical  applications 
in  a  multi-threaded  environment; 
and  train  end-users  on  software 
maintenance.  Must  have  five 
years  of  experience  in  time  criti¬ 
cal  software  development  in  a 
multi-threaded  environment  uti¬ 
lizing  C++  with  C/C++.  If  inter¬ 
ested,  submit  resume  in  dupli¬ 
cate  to:  Natalie  Gow,  Intec 
Telecom  Systems,  301  Peri¬ 
meter  Center  North,  Ste  200, 
Atlanta.  GA  30346. 


Programmers  &  Software 
Engineers:  Analyze,  design, 
develop,  test  &  implement 
specialized  business  apps. 
in  Business  Objects  Version 
5.1,  Web  Intelligence  & 
related  Business  Objects 
products,  RSA  Bsafe  SDK, 
VBA,  ASP,  Oracle  related 
RDBMS  &  rel.  tools.  Travel 
req.  /  US  Workers  only. 
Send  resume  to  Sapphire 
Consulting  Company,  8 
Orange  Street,  Edison.  NJ 
08817.  EOE. 


Sr.  SW  Eng’r:  Dsgn  device  dri¬ 
ver  for  Intel  Xscale/StrongArm 
processors  w /  MS  WinCE3.0. 
WinCE.Net  4.2  &  embed'd  Lin¬ 
ux;  Dsgn  firmware  for  graph  s 
controllers  &  video  capture/com- 
pres’n  algorithms;  Dsgn  SW 
applic'n  w /  MFC, C++,  ODBC,  db 
archit’re/program’g.  40h/w,  8-5, 
MS  Comp.  Sci.  2-yr  wk  exp  w / 
Xscale,  Video  Controller  &  MFC. 
Resumes  to  SI  Solutions,  Tam¬ 
pa,  Crai9@S.-i-solutions.com  / 
fax:  813-630-2532.  Only  US 
wkrs  can  apply. 


Ohio  insurance  company  seeks 
Application  System  Analyst  to 
assist  in  researching  and  fact¬ 
finding  to  develop  or  modify 
more  complex  information  sys¬ 
tems.  Designs,  codes,  tests, 
debugs,  documents  and  main¬ 
tains  program.  Min  req. 
Bachelor's  or  Master's  (or  eqv.) 
in  Computer  Science  &  3  yrs  in- 
job/job-related  exp.  in  program¬ 
ming  including:  MS  . Net/C#, 
VB6,  COM.  COM+,  Windows 
DNA,  C++,  XML.,  UML.  Visio, 
VSS,  MFC.  SQL.  RDBMS,  ASP, 
ASP.NET.  Resume  to  Susan 
Swales,  300  N  Commons  Blvd., 
Mayfield  Village,  OH  44143 


Integrated  Software  Solutions, 
Inc.,  a  rapidly  growing  IT  con¬ 
sulting  Co.  has  permanent  pos 
open  for  Computer  Software 
Professionals  w/BS  or  equiv  & 
exp  in  one  of  foil  skills  or  in  com¬ 
bination: 

•  Administration  -  Win  NT/2000/ 
Unix 

•  DBA  -  Oracle/Sybase 

•  PeopleSoft  &  related  People- 
Soft  Tools 

•  Main  Frames  -  DB2,  CICS, 
JCL,  TSOP 

•  Oracle  Dvlpr-SQL/PL/SQL/ 
Dvlpr  2000 

•C,  C++,  VB,  J2EE,  ASP 

•  SAP  R/3  &  related  tools 

•  QA  Testing-WinRunner/Load- 
Runner/Silk/Rational  Suite/ 
Test  Director 

ISS,  Inc.,  provides  competitive 
salary  &  benefits.  Applicants 
must  be  willing  to  relocate/travel 
to  various  unanticipated  Iocs 
throughout  US.  Send  resume  to: 
HR  Dept.,  ISS,  Inc.,  Attn:  HR.  55 
Princeton-  Hightstown  Rd,  Ste 
#103,  Princeton  Junction,  NJ 
08550  or  email  to: 
resumes@issinc-usa.com 


Programmer  Analyst  need¬ 
ed  w/2  yrs  exp  in  using 
Oracle  Applications,  Oracle 
Forms,  Oracle  Reports, 
Designer6,  Discovered, 
HP  UNIX,  Digital  UNIX,  Sun 
Solaris,  Windows  NT,  Stan¬ 
dard  APIs',  Data  Pump,  cus¬ 
tom.  pll,  SQL  Loader,  PL/ 
SQL  &  write  Fast  Formulas 
Generate  test  scripts  using 
Mercury.  Mail  resumes  to: 
Optima  Technology  Part¬ 
ners,  Inc,  264  South  River 
Rd,  Ste  #454,  Bedford,  NH 
03110. 


Sr.  Citrix  Admin  (CCEA  or 
CCA)  to  dsgn,  install,  con- 
fig,  support,  &  admin  Cit¬ 
rix  products  (XPe,  Nfuse, 
Citrix  Sec  Gateway,  Res 
Mgr,  Inst  Mgr).  Implmt  & 
support  large  NT  &  Citrix 
Farm  envrmts  w/SNA  con¬ 
nectivity.  Resolve  Citrix  in¬ 
frastructure  &  app  related 
issues  &  produce  tech  do¬ 
cumentation.  BS+2  years 
exp.  WTR,  Inc,  156  5th 
Ave,  Ste  1034,  NY,  NY 
10010.  Res  &  cvr  Itr. 


Application  Integration  Develop¬ 
ers  III  needed.  Seeking  candi¬ 
dates  possessing  BS  or  equiv 
and  relevant  work  exp.  Part  of 
rel  work  exp.  must  include  2 
years  working  w /  JDE  ERP  and 
SQL.  Duties  include:  Develop, 
maintain,  enhance  and  inte¬ 
grate  JDEdwards  OneWorld  en¬ 
terprise  business  applications. 
Work  w/  Peoplesoft  Enterprise 
One  (JDE  ERP),  webMethods 
Optio,  SQL,  Unix  and  Oracle. 
Mail  resume  &  refs  to:  Temple- 
Inland  Forest  Products,  1300 
South  Mopac,  Austin,  TX 
78746. 


IT  PROFESSIONALS 
Software  Engineer 

(Glen  Mills,  Pennsylvania  and  other  locations  throughout  the  U.S.).  Re¬ 
sponsible  for  the  design,  implementation,  configuration,  and  testing  of  soft¬ 
ware  systems  and  system  components  in  the  Office  of  Information  Man¬ 
agement.  Creates  design  specifications  for  systems  and  components.  Per¬ 
forms  software  development,  including  Lotus  Notes  Development  and  ASP 
and  HTML  Development,  and  software  engineering  including  hands-on  de¬ 
velopment  of  software  components,  web  parts,  and  web  services  using 
.NET  framework,  C#  language,  Domino  R5,  Lotus  Script,  ASP,  DHTML, 
JavaScript,  VBScript,  VBA,  DHTML,  andASP.NET.  Utilizes  Visual  Basic  for 
software  development  as  well  as  to  maintain  software  applications.  Devel¬ 
ops  web  parts  and  components  for  use  within  Microsoft  SharePoint  v2  Port¬ 
al  platform.  Designs  and  documents  data  models.  Performs  SQLServer  de¬ 
sign  and  development,  including  hands-on  development  of  SQL  scripts,  in¬ 
cluding  ER  diagrams  and  stored  procedures.  Develops  XML  schemas  and 
XSL/XSLT  transformations.  Creates  scripts  and  utilities  for  data  migration 
and  synchronization  between  multiple  platforms  such  as  Lotus  Notes/Dom- 
ino,  Microsoft  SharePoint,  and  Microsoft  CMS.  Designs  components  and 
systems  within  global  web-based  applications  using  object-oriented  meth¬ 
odology.  Participates  in  architecture  and  infrastructure  definition  of  global 
web-based  systems.  Utilizes  Rational  Unified  Process  in  software  devel¬ 
opment.  Reviews  business  requirements,  develops  prototypes,  evaluates 
third  party  solutions  and  creates  design  and  architecture  documents. 
Works  in  a  team  environment  using  a  structured  development  process  and 
delivers  applications  on  time  and  within  budget.  Follows  up  with  issues  in 
an  efficient  manner,  including  working  hand  in  hand  with  Quality  Assura¬ 
nce,  Operations,  Project  Management  and/or  Business  Analysis.  Regularly 
communicates  project  progress,  issues,  and  risks  to  project  manager. 

The  wage  offered  is  $80,400  per  year.  The  work  schedule  is  Monday- 
Friday,  9:00  am  to  5:00  pm.  The  position  requires  a  Bachelor’s  degree  or 
equivalent  in  Comp  Science,  Engineering  (any),  or  Information  Systems  + 
2  years  of  experience  in  the  job  offered  or  2  years  of  experience  as  a 
Software  Engineer,  Programmer  Analyst,  Software  Developer,  or  Senior 
Software  Developer.  Employer  regards  a  foreign  degree  as  equivalent  to  a 
US  Bachelor's  degree  as  determined  by  an  accredited  education  evalua¬ 
tion  service.  Related  experience  must  include  two  years  of  software  devel¬ 
opment,  software  engineering,  Lotus  Notes  Development  (including  Dom¬ 
ino  R5  and  Lotus  Script),  ASP/HTML  Development  (including  VBScript), 
Visual  Basic,  and  SQL  Server  design  and  development  (including  Stored 
Procedures  and  ER  Diagrams). 

Please  send  your  resume  or  C.V.,  referencing  Job  Order  Number 
WEB460002  to  the:  PA  CareerLink,  701  Crosby  Street,  Suite  B,  Chester, 
PA  19013.  EOE. 


Client/Server  Programming 
Consultant.  Design  &  develop 
innovative  web-based  solutions 
to  strengthen  relationships 
between  financial  institutions  & 
their  customers.  Apply  object- 
oriented  design,  analysis  & 
development  skills  using  JAVA 
J2EE  platform.  Analyze  client's 
business  &  technical  objectives 
to  determine  high  level 
client/server  application  require¬ 
ments  (e  g  ,  addressing  cross 
functional  business  processes 
or  workflows,  re-engineering 
business  processes,  creating 
object  oriented  business  func¬ 
tional  models).  Design  architec¬ 
tural  components  of  the 
client/server  environment  (e  g., 
data  marshaling,  insulation  lay¬ 
ers,  class  libraries).  Perform 
high  level  coding  activities  (e  g., 
codes  device  drivers  using 
C/C++;  codes  architectural  com¬ 
ponents,  codes  objects). 
Develop  &  coordinate  the  testing 
process  for  major  application 
releases  &  enhancements. 
Research  &  recommend  prod¬ 
ucts  &  new  technologies  for  the 
client/server  environment  &  may 
act  as  a  formal  project  leader  for 
development  projects.  Req.  a 
Bachelor's  Degree  or  for.  Equiv. 
in  Eng.,  Comp.  Sci.,  Math.,  or 
related  field,  plus  5  yrs  of  pro¬ 
gressive  exp.  in  the  position 
offered,  interface  screen 
design/develop,  or  client/server 
programming  develop.  Qualified 
candidate  must  have  at  least  1 
yr  of  working  exp.  in  architectur¬ 
al  design  for  web-based 
client/server  environment.  Job 
located  in  Jacksonville,  FL. 
$94,000/yr.  40  hrs/wk,  M-F,  9am 
-  5pm.  Send  resumes  to: 
Workforce  Program  Support, 
Ref:  FL-2562142,  P.O.  Box 
10869,  Tallahassee,  FL  32302- 
0869 


IT  Professionals  needed  for  IT 
development  &  consulting  firm 
headquartered  in  the  Atlanta 
region  but  w/projects  for  clients 
located  throughout  the  U.S.  Mul¬ 
tiple  positions  open.  The  posi¬ 
tions  open  are  for  client  server  & 
web-based  developers,  GMA- 
LAN  Engineers,  Embedded  soft¬ 
ware  developers.  Some  of  the 
skill  sets  needed  immediately 
include: 

•  Development  of  real-time  sy¬ 
stems  using  32-it  microproces¬ 
sors.  Required  skill  sets  include: 
GMLAN  network  operating  sys¬ 
tem  based  development,  ANSI 
C,  basic  H/W  analysis  &  debug¬ 
ging,  working  w/stakeholders  to 
define  &  refine  requirements. 
Exp.  w/Vector,  CANtech  auto¬ 
motive  network  design  &  simula¬ 
tion  tools  (CANalyzer  &  CANoe), 
&  GMLAN  handlers. 

•  Perform  ETL  (Extract,  Trans¬ 
form,  &  Load);  design  exception 
handling  strategies  &  engage  in 
performance  tuning  of  databas¬ 
es;  work  w/Oracle,  DB2,  SQL 
Server,  MS  Access,  &  Informat- 
ica 

•  Japanese  speaking  Test  En¬ 
gineers  &  Embedded  Software 
Engineers.  Should  be  able  to 
read,  write  &  speak  Japanese. 
Exp.  w /  either  Honda  (GA-NET, 
iBUS)  or  equivalent  protocols  w/ 
Nissan  or  V850  (aka/other  key¬ 
words:  NEC  V850,  V850  Micro¬ 
controller,  V850  32-Bit,  V850- 
SA1 ,  V850  RISC  processor) 

•  Unix/Linux  system  adminis¬ 
trator,  SAN  developers. 

All  positions  require  a  B.S. 
degree  in  either  computer  sci¬ 
ence,  math,  engineering,  or 
business.  Competitive  salary  is 
offered.  Exp.  required  varies 
from  1-5  yrs.  exp.  in  skills  identi¬ 
fied  above.  Send  resume  to: 
careers@datamatics.us. 

Applicants  must  have  authority 
to  work  permanently  in  the  U.S. 


Sr.  Systems  Analysts  to  lead 
teams  to  analyze,  design,  devel¬ 
op,  appls  using  Java,  C++, 
VC++,  VB,  LabView,  Matlab, 
MathCAD,  Rational  Rose, 
OOAD/P,  UNIX  etc;  analyze, 
finalize  architecture  using  RUP 
process,  J2EE  design  patterns, 
UML  diagrams;  administer,  de¬ 
ploy  components  into  appl  serv- 
er-Websphere;  develop  applica¬ 
tions  as  per  ISQ-9001,  CMM 
level  3  compliant  software  dev. 
Methodologies.  Require:  Mas¬ 
ters  or  foreign  equiv.  in  CS  / 
Engg.  (any  branch)  /  Business 
with  1  yrs  exp.  Travel  Involved. 
Comp. Salary.  F/T.  Resumes: 
HR,  Synergy  America,  Inc., 
6340  Sugarloaf  Parkway,  Ste 
140,  Duluth,  GA  30097. 


Comp  Consults  is  looking  for 
programmer/system  analysts, 
engineers  or  IT  consultants  to 
design  &  develop  programs  us¬ 
ing  Oracle,  Unix,  C/C++,  VB, 
Java,  J2EE,  EJB,  XML,  XSL/ 
XSLT.  Mim  requirement  is  BS 
plus  experience.  Please  send 
resumes  to  imma@comp 
consults.com.  EOE.  No  calls. 

in-Venture  Soft  is  seeking  IT 
consultants  to  design  &  develop 
applications  for  various  projects. 
Applicants  must  have  BS/MS 
with  solid  background  in  Oracle, 
WebSphere,  Java,  EJB,  ASP. 
We  offer  competitive  wage  with 
full  benefit.  Travel  maybe  requir¬ 
ed.  Apply  at  resume@ivsinc.net. 
EOE. 


IT  System  Analyst.  BS  in  comp, 
sci.  or  re.  field;  proven  IT  exp  to 
incl.  desktop  mgmt,  area  sup¬ 
porting  a  large  enterprise,  Win- 
Install,  Tivoli  s/ware  distribution 
PUSH,  Tivoli  UserLink,  packag¬ 
ing  applies  via  WISE  &  Tivoli 
packager,  exp  w/dsgn  engg 
methodologies;  demonstrated 
communication  &  proj.  mgmt. 
skills,  knowl  of  insurance  &  fin. 
svees  &  willing  to  travel  &  do 
on-call  support.  Resume  &  Cvr 
Itr  to:  Jennifer  Schwartz,  HR. 
Refer  to  Job  #  ACW23174,  711 
High  St.,  Des  Moines,  IA 
50392-0550. 


SW  Eng’rs:  Dsgn,  dev’lp,  test 
web-based  bus.  sw  app’ns  w / 
ColdFusion  4.5/5/MX,  ASP; 
Java  w /  Struts;  Dsgn  &  prog’m 
CFML  pages  &  custom  tags 
w/  JavaScript,  MVC,  Fuse- 
box;  Analyze  &  dsgn  db  mod¬ 
ule  w  /  Oracle8i,  T-SQL, 
PL/SQL  RDBMS,  SQL  Svr.  8- 
5;  40h/w.  BS  or  foreign  equiv- 
al’t  in  Comp  Sci,  3  yr  wk  exp 
in  job  or  any  posit’n  w / 
ColdFusion,  Java/Struts,  &  T- 
SQL.  Resume  to  PowerSabre 
Mahesh@powersabre.com 

fax:  904  730  5677. 


Sr.  Programmer  An¬ 
alyst  for  health  org  in 
Sacramento,  CA.  Must 
have  Bach's  in  comp 
sci/comp  eng  or  rltd 
field  &  2  yrs  exp.  Send 
resume  to:  Sutter 
Conect,  10470  Old 
Placerville  Rd,  Suite 
100,  Sacramento,  CA 
95827,  attn:  Carla 
Alegado. 
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Seeking  qualified  applicants  for 
the  following  positions  in  Mem¬ 
phis/Collierville,  TN:  Senior  Bu¬ 
siness  Application  Analyst.  Act 
as  liaison  between  technical 
developers  and  users/custom¬ 
ers.  Requirements:  Bachelor's 
degree  or  equivalent*  in  comput¬ 
er  science,  math,  statistics,  busi¬ 
ness  or  related  field  plus  5  years 
of  experience  in  analyzing  busi¬ 
ness  systems  and  developing 
technical  automated  solutions. 
Experience  with  SQL,  CGI  envi¬ 
ronment  and  J2EE  environment 
also  required.  'Master's  degree 
in  appropriate  field  will  offset  2 
years  of  general  experience. 
Submit  resumes  to  Marc 
Blackburn,  FedEx  Corporate 
Services,  4200  Regent  Blvd., 
Irving,  TX  75063.  EOE  M/F/D/V. 


Java  Developer.  Provide  appli¬ 
cation  development  services  to 
create  new  web  based  applica¬ 
tions  and  maintain  existing  appli¬ 
cations  to  support  business  unit 
requirements  using  Java  tech¬ 
nologies.  Support  the  design 
and  development  of  web  based 
applications  through  require¬ 
ment  development  and  docu¬ 
mentation,  programming,  testing 
and  other  tasks  related  to  the 
systems  development  life  cycle. 
BS  in  Information  Systems  or  re¬ 
lated  field.  3+  years  exp  with  en¬ 
terprise-wide  application  devel¬ 
opment,  Object  Oriented  pro¬ 
gramming  and  experience  with 
database  design  and  modeling. 
Strong  middleware  and  front  end 
skills  with  a  thorough  under¬ 
standing  of  web  architecture  and 
design.  Submit  resume  to  Ned 
Bement,  Director  of  Recruiting, 
Alliance  Consulting  Associates 
Inc.,  2005  Market  Street,  32nd 
FI,  Philadelphia,  PA  19103. 


Systems  Analysts  to  work  as 
consultants  at  client  sites  in 
the  U.S.  and  abroad.  Imprint, 
customize  &  upgrade  Oracle 
ERP  s/ware  pkgs.  Reqs: 
BA/BS  in  Comp  Sci,  Eng'g, 
Bus,  Logistics,  HR,  or  related 
field  +  2  yrs  exp  w/Oracle 
Apps  or  DB's.  Send  resumes, 
refs,  and  salary  req’s  to  Attn: 
HR,  IT  Convergence,  150  E. 
Gilman  St,  Suite  B2200, 
Madison,  Wl  53703  or 
resume@itconvergence.com. 


Web  Software  Engineers 
needed  to  dvlp  OSS  s/ware 
for  telecommunications  mkt. 
Req  Bach  in  Com  Sci,  Comp 
Eng,  MIS  or  related  tech'l 
field  &  3  yrs  exp  in  job  or  3 
yrs  exp  in  web-based  s/ware 
dvlpmt  using  MS  tools,  ASP 
&  VB  based  COM/COM+, 
hitting  SQL  Server  databas¬ 
es.  Resume  to  RiverRock 
Systems,  Attn:  HR,  14901 
Quorum  Dr.,  Ste  250,  Dallas, 
TX  75254. 


DATABASE  ADMINISTRTOR  to 
develop,  implement,  and  main¬ 
tain  the  company's  database 
and  information  systems:  des¬ 
ign,  install,  manage  and  main¬ 
tain  the  performance  of  SQL 
Server  2000  databases  across 
the  unified  enterprise;  develop 
and  maintain  custom  inventory, 
invoice  system  and  sales  reports 
and  modify  standard  reports 
using  VB  and  PL/SQL;  write 
queries  for  reports  for  account¬ 
ing  and  finance  department;  cre¬ 
ate  various  databases  and  main¬ 
tain  database  management  soft¬ 
ware  using  server/client  applica¬ 
tion,  including  SQL  and  object 
oriented  programming  lang¬ 
uage.  Require:  Bachelor’s  in 
Computer  Science/Information 
Systems.  Competitive  salary  of¬ 
fered.  Mail  resume  to:  Presid¬ 
ent,  King  Kong  USA,  Inc.,  800 
Iowa  Ave.,  Riverside,  CA  92507. 


Global  IT  Solutions  USI,  Inc 
(GITSUSI,  Inc.)  has  positions 
open  for  its  branches  in  Port¬ 
land,  ME  and  Dakota  Dunes, 
SD.  Prog.  Analysts  to  analyze, 
design/develop  s/w  appls  using 
Java,  JavaScript,  VBScript,  ASP, 
HTML,  Weblogic,  Oracle,  SQL, 
COBOL,  DB2,  CICS  under 
Windows,  Unix  &  MVS  OS;  per¬ 
form  unit,  functional,  integration, 
regression  and  systems  level 
testing;  analyze  user  reqs,  pre¬ 
pare  design  documents;  develop 
&  enhance  online  &  batch  pro¬ 
grams;  implement,  install,  test, 
debug  and  modify  new/existing 
appls.  Require  BS  or  foreign 
equiv.  in  CS/Engg.  (any  branch) 
&  2  yrs  exp.  in  IT.  Travel  in¬ 
volved.  Competitive  Salary.  F/T. 
Please  specify  desired  location 
when  sending  resume.  Resum¬ 
es  to:  HR,  GITSUSI,  Inc.,  1133 
East  35th  Street,  Suite  2D, 
Brooklyn,  NY  11210. 


2Wire,  Inc.  in  San 
Jose  seeks  Sr.  SW 
Embedded  Engr:  BS 
CS  in  Eng'g  or  related 
field  +  6  yrs  relevant 
exp.  (alt  MS  CS  in 
Eng'g  +  4yrs  relevant 
exp).  Send  resumes 
to: 

tnauven@2Wire.com 

www.2Wire.com 


Sr  Programmer  Analysts:  man¬ 
age  teams  to  analyze,  design, 
maintain  software  appls  using 
J2EE,  Java,  JSP,  ASP,  HTML, 
XML,  Oracle,  SQL  Server  on 
Windows/UNIX  OS;  perform 
requirements  analysis  and  con¬ 
duct  functional  testing/debug¬ 
ging;  document,  maintain  & 
update  use  cases,  GUI  design, 
BPR  scenarios.  Require:  BS  or 
foreign  equiv.  in  CS/Engg. (any 
branch)  and  2.5  years  exp  in  IT 
OR  MS  in  CS/Engg  (any  branch) 
and  6  months  exp  in  IT.  Travel 
involved.  F/T  position.  Comp, 
salary.  Resume  to:  HR,  Quest 
America,  Inc.,  211  East  Ontario 
Street,  Suite  1800,  Chicago,  IL 
60611. 


Technical  Architect/Sr.  Software 
Developer  wanted.  Must  have 
Bach.  deg.  in  Comp.  Sci.,  Math, 
Physics  or  related  field  &  3  yrs. 
middleware,  integration  &  web 
technology  exper.  includ.  exper. 
with  IBM  WebSphere  Application 
Server  &  IBM  WebSphere  MQ  & 
1  yr.  exper.  providing  tech,  sup¬ 
port  to  customers  in  the  energy 
&/or  utilities  industries.  (Exper. 
can  be  concurrent).  Send  cover 
letter  and  resume  to  Corporate 
Recruiting,  Code  EUAF, 
LogicaCMG,  32  Hartwell  Ave., 
Lexington,  M A  02421.  No  third 
parties  or  phone  calls  please. 
LogicaCMG  is  an  EEO,  M/F/V 
Employer. 


Data  Warehouse  Specialists, 
Inc.  is  looking  IT  professionals. 
Duties  include:  design  applica¬ 
tions  for  Business  intelligence, 
On-Line  Analytical  Processing 
(OLAP)  &  Datawarehousing 
using  various  tools.  Competi¬ 
tive  wage  with  full  benefits. 
Please  send  resumes  to 
info@dwsDecialsts.com.  EOE. 

DocOptions,  Inc.  seeks  high 
skilled  Software  Engineers  to 
design  &  develop  applications 
using  Object  Oriented  Analysis/ 
Design  tech,  TCP/IP,  XML, 
XSL.  Applicants  must  have  MS 
in  computer  science  with  1-2  IT 
experience.  Please  send  res¬ 
umes  to  1851  Camellia  Dr  , 
Tracy,  C A  95378. 


Product  Manager  required  for 
leading  digital  printing  products 
firm  to  analyze  clients'  product 
specifications  and  marketing  re¬ 
quirements.  Understand  market 
trends,  clients’  software  func¬ 
tionality  needs  and  forecasting 
models  to  oversee  development 
of  software  prototypes  using  C+, 
ORACLE,  SQL  Server,  Excel 
and  other  decision  modeling 
tools.  Assist  in  design,  position, 
message,  and  launch  software 
and  software  services  into  the 
market  to  create  valuable  and 
ongoing  client  relationships. 
MBA  in  Business  Administration 
or  Marketing  and  relevant  expe¬ 
rience  in  marketing  and  IT  pro¬ 
ject  management.  Send  resume 
to  Elena  Kotanova,  Office 
Manager,  Caslon  &  Co.,  5150  El 
Camino,  Suite  B14,  Los  Altos, 
CA  94022. 


Sr.  Programmer  Analysts  to  lead 
teams  to  analyze,  design,  dev¬ 
elop  appls  using  OOP,  Java, 
JSP,  Servlets.  EJB,  XML,  HTML, 
JavaScript,  Weblogic,  JDBC, 
Oracle,  etc  in  UNIX,  Solaris, 
Windows  OSs;  develop  Oracle 
stored  procedures  and  data 
modeling;  implement  appls  and 
perform  strategic  planning/oper¬ 
ations  support;  provide  end 
user  training.  Require  BS  or  for¬ 
eign  equiv.  in  CS/Engg.  (any 
branch)  &  3  yrs  exp.  in  IT.  Comp 
salary,  F/T,  travel  involved. 
Resume  to  HR,  Ordusion  Tech¬ 
nologies,  Inc.,  3883  Rogers 
Bridge  Road,  Suite  504,  Duluth, 
GA  30097. 
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Red  Hat,  Inc.,  located  in  Raleigh 
/Durham,  North  Carolina,  has  an 
immediate  need  for  a  Program¬ 
mer  /Analyst  to  be  responsible 
for  providing  programming/an¬ 
alysis/production  support  for  Or¬ 
acle  ERP  applications.  Specific 
duties  include:  providing  func¬ 
tional  and  technical  support  on 
the  Oracle  ERP  module,  includ¬ 
ing  AR,  GL,  AP  and  iStore;  de¬ 
signing  and  developing  technical 
reports  to  meet  the  needs  of  the 
ERP  users;  performing  program¬ 
ming  utilizing  the  following:  Red 
Hat  Enterprise  Linux,  Java,  Perl, 
and  shell  scripting;  customizing/ 
extending  Oracle  applications 
utilizing  Oracle  Developer  Tools, 
iStore  and  Workflow;  and,  partic¬ 
ipating,  periodically,  in  a  24x7 
on-call,  technical  support  rota¬ 
tion.  Requires  a  Bachelor's  de¬ 
gree  in  Computer  Science,  En¬ 
gineering  or  other  closely  relat¬ 
ed  field,  together  with  the  dem¬ 
onstrated  ability  to  integrate  and 
extend  enterprise  applications 
using  Java  and  XML  technology 
in  an  Oracle  environment.  Must 
also  have  demonstrated  skills 
involving  SQL,  J2EE,  Apache, 
Tomcat.  SOAP/WSDL,  XML, 
EAI  tools,  RDBMS  and  Oracle 
ERP  or  CRM.  Annual  salary  is 
$65,000.  Qualified  applicants 
respond  to  job  code:  BKT101  to 
martham@redhat.com. 


Multiple  openings  for  software 
engineers  to  design,  develop 
and  test  computer  programs  for 
business  applications;  analyze 
software  requirements  to  deter¬ 
mine  feasibility  of  design;  direct 
software  system  testing  proce¬ 
dures  using  expertise  in  J2EE, 
XML,  Oracle  and  Apache  Ser¬ 
ver.  Requirements.  Bachelor's 
Degree,  educational  or  function¬ 
al  (3  years  experienced  year  of 
college)  equivalent,  in  Engin¬ 
eering,  Computer  Science  or  re¬ 
lated  field  and  two  years  experi¬ 
ence  as  a  software  engineer  or 
computer  programmer,  knowl¬ 
edge  of  J2EE,  XML.  Oracle  and 
Apache  Server.  Salary:  $70,242/ 
year  Working  Conditions:  8:00 
A  M  to  5:00  P.M..  40  hours/ 
week,  involves  extensive  travel 
and  frequent  relocation.  Apply 
Site  Administrator,  Greene 
County  CareerLink,  4  West  High 
Street.  Waynesburg,  PA  15370, 
Job  No.  WEB461155. 


Software  engineer  to  design,  de¬ 
velop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements  to 
determine  feasibility  of  design; 
direct  software  system  testing 
procedures  using  expertise  in 
J2EE,  EJB,  Struts,  JSF,  Oracle, 
Tivoli  and  JBuilder.  Require¬ 
ments:  Bachelor's  Degree,  edu¬ 
cational  or  functional  (3  years  ex¬ 
perienced  year  of  college)  equi¬ 
valent,  in  Engineering,  Computer 
Science  or  related  field  and  two 
years  experience  as  a  software 
engineer  or  computer  program¬ 
mer,  knowledge  of  J2EE,  EJB, 
Struts.  JSF,  Oracle,  Tivoli  and 
JBuilder.  Salary:  $70, 242/year. 
Working  Conditions:  8:00  A.M.  to 
5:00  P.M.,  40  hours/week,  in¬ 
volves  extensive  travel  and  fre¬ 
quent  relocation.  Apply:  BECS/ 
CareerLink  Program  Supervisor, 
Indiana  County  CareerLink,  300 
Indian  Springs  Road,  Indiana,  PA 
15701,  Job  No.  WEB460299. 


IT  CAREER  OPPORTUNITIES 

DELAWARE  -  Network  Engin¬ 
eering  Services  Analyst.  Deliver 
telecommunications  services  re¬ 
lated  to  internet/firewall  and  per¬ 
imeter  security  for  South  Ameri¬ 
can  clients.  Position  requires  a 
BS  and  relevant  experience;  a 
combination  of  experience  and 
college  level  education  may  be 
accepted.  The  flexibility  to  travel 
and  be  on  call  may  be  neces¬ 
sary.  Must  be  fluent  in  Spanish 
and/or  Portuguese.  Proof  of 
legal  authorization  to  work  in  the 
U.S.  is  required.  Please  forward 
your  resume  to  Computer  Sci¬ 
ences  Corp.,  Attn:  J.  Le,  2100  E. 
Grand  Ave.,  Mail  Code  A209,  El 
Segundo,  CA  90245. 
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Software  Engineer  -  Web  Tech¬ 
nology:  Architect  scalable  mid¬ 
dleware  components  using  Ora¬ 
cle,  Enterprise  Java  Bean  (EJB) 
and  enterprise-scale  distributed 
computing  systems;  analyze 
and  design  database  layer  mid¬ 
dleware  architecture  to  support 
access  to  central  customer  pro¬ 
file  data  from  Oracle  databases, 
design  function  implementations 
through  BEA  weblogic  server  in 
distributed  cluster  environments; 
apply  techniques  in  the  field  of 
distributed  artificial  intelligence 
for  business  intelligence;  design 
cache  and  pagination  functions 
to  process  large  amount  of  en¬ 
terprise  data;  enhance  managed 
information  base  systems  for 
various  database  schemas  to 
support  management  functions 
for  e-business  data;  develop 
techniques  to  support  require¬ 
ments  for  special  data  types  for 
distributed  systems;  tune  sys¬ 
tem  performance  to  reduce  sys¬ 
tem  down  time  and  improve  sys¬ 
tems  stability.  Requires  a  Mas¬ 
ters  degree  in  Mechanical  En¬ 
gineering  or  Computer  Science 
and  either  2  yrs.  exp.  in  the  job 
offered  or  2  yrs.  exp.  in  archi¬ 
tecting  scalable  middleware 
components  using  Oracle,  EJB 
and  enterprise-scale  distributed 
computing  systems  Salary  is 
$93,500/yr,  40  hrs/wk,  8AM  to 
5PM,  Mon.-Fri.  To  apply  submit 
2  copies  of  resume  to:  Case 
#200300375,  Division  of  Career 
Services,  Labor  Certification 
Unit,  19  Staniford  St.,  1st  floor, 
Boston,  MA  02114. 


SYSTEMS  ANALYST  to  ana¬ 
lyze,  design,  develop,  imple¬ 
ment,  install  and  maintain  com¬ 
plex  application  software  based 
on  client-server/e-commerce/ 
web  technologies  and  distribut¬ 
ed  computer  environment  using 
Visual  J++,  MFC,  Visual  Basic, 
Crystal  Report,  ActiveX,  HTML, 
DHTML.  COM,  XML,  CSS,  VB 
Script,  JavaScript,  SQL  Server, 
Developer  2000,  Designer  2000 
and  Oracle  under  Windows 
95/98/NT/2000  and  MS-DOS 
operating  systems.  Require: 
B  S.  degree  (or  equivalent)  in 
Computer  Science,  or  a  closely 
related  scientific  discipline  with  2 
yrs  of  exp  in  the  job  offered  or  as 
a  Programmer/Analyst;  Each  3 
yrs  of  progressively  responsible 
work  exp  in  the  field  will  be  con¬ 
sidered  equivalent  to  1  yr  of  col¬ 
lege  education.  Extensive  travel 
on  assignments  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Ap¬ 
ply  by  resume  to:  Rambabu 
Kumaraswamy,  Newgen  Tech¬ 
nologies,  Inc.,  2980  Ennfield 
Lane,  Duluth,  GA  30096,  Attn: 
Job  JB. 


Software  Developer,  Boca 
Raton,  FL,  40-hr  wk,  9  AM 
-  5  PM,  $85,027/yr.;  2  yrs 
exp  in  job  offered  & 
Bachelor's  in  Comp.  Sci, 
Comp  Eng.,  Elect.  Eng.  or 
electronics;  in  lieu  of 
degree,  will  accept  4  yrs 
exp  in  software  dev  or  soft¬ 
ware  programming,  in¬ 
cluding  FoxPro  DOS  & 
data  modeling.  Supv.  3 
emplyees;  develop,  imple¬ 
ment  &  maintain  applica¬ 
tion  software  to  establish 
standards  &  specifica¬ 
tions;  dev.  application  soft¬ 
ware  using  FoxProA/isual 
FoxPro  &  other  approved 
programming  language; 
implement  approved  chan¬ 
ges  to  application  soft¬ 
ware;  Submit  resume: 
Agency  for  Workforce 
Innovation,  P.O.  Box 
10869,  Tallahassee,  FL 
32302;  JO#FL-2558750. 


Programmer  Analyst 

(Micro/Web)  - 
Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  integrated  client- 
server  based  systems  for  busi¬ 
ness,  financial,  banking,  manu¬ 
facturing  and  other  commercial 
business  application  systems  in 
a  multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analy¬ 
sis,  design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor's  Degree  (or  equiva¬ 
lent)  in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes  Oracle, 
Sybase,  Informix,  SQL  Server, 
Progress,  Ingres,  Access  and 
Proxy  Server;  and  B  includes 
PowerBuilder,  Visual  Basic,  MS- 
Windows,  Visual  C++,  JAM, 
APT-SQL,  SQL*FORMS,  ESQL/ 
C,  GUPTA  SQL,  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP,  Front  Page,  Perl  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,533 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to:  Armstrong 
County  CareerLink,  ATTN:  CL 
Program  Supervisor,  1270  North 
Water  Street,  PO  Box  759, 
Kittanning,  PA  16201-0759. 
Refer  to  Job  Order  #  WEB 
460361. 


Programmer  Analyst 

(IBM  Mainframe)  - 

Multiple  Openings 

Structured  systems  analysis,  de¬ 
sign,  development,  testing,  qual¬ 
ity  assurance,  implementation, 
integration,  maintenance,  sup¬ 
port  and  conversion  of  large  vol¬ 
ume  online  transaction  process¬ 
ing  and  batch  application  sys¬ 
tems  in  a  multi-hardware/multi¬ 
software  environment  over  cen¬ 
tralized  database  systems  using 
relational/hierarchical/network 
database  management  syst¬ 
ems,  Third  Generation  Languag¬ 
es  (3GLs),  Fourth  Generation 
Languages  (4GLs),  CASE  tools 
and  Transaction  Processing 
Software.  Bachelor's  Degree  (or 
equivalent)  in  Computer  Sci¬ 
ence-Math/Engineering/Science 
/Business-Commerce  and  1  yr. 
experience  in  job  offered  or  as 
Software  Engineer/Systems  An¬ 
alyst  are  required.  Must  have 
appropriate  combination  of  skills 
as  follows:  1  of  A  and  1  of  B  and 
1  of  C;  or  1  of  A  and  2  of  B;  or  1 
of  A  and  2  of  C.  A  includes  DB2, 
IMS  DB  and  IDMS  DB;  and  B 
includes  CICS,  IMS  DC,  IDMS 
DC,  ADS/O,  QMF,  VSAM  and 
MF-Workbench;  and  C  includes 
TELON,  IEF,  ADW,  CSP  and 
APS;  High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,533 
-  $78,000  per  year.  Qualified  ap¬ 
plicants  should  contact  or  send 
resume  to:  Fayette  County  Car¬ 
eerLink,  ATTN:  CareerLink  Pro¬ 
gram  Supervisor,  135  Waylan 
Smith  Drive,  Uniontown,  PA 
15401.  Refer  to  Job  Order  # 
WEB  460344. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop  and 
implement  complex  mainframe- 
based  application  software 
using  COBOL,  CICS,  DB2, 
VSAM,  IDMS,  Datacom  and 
JCL  under  ISO  9001  and  SEI 
CMM  quality  procedures.  Re¬ 
quire:  B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  a  closely  related  field  with 
2  yrs.  of  exp  in  the  job  offered. 
Extensive  travel  on  assign¬ 
ments  to  various  client  sites 
within  the  U.S.  is  required. 
Competitive  salary  offered. 
Apply  by  resume  to:  Sophie 
Mookerji,  Software  Paradigms 
International,  Inc.,  3901  Ros¬ 
well  Rd,  Ste  134,  Marietta,  GA 
30062;  Attn:  Job  PK. 
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IBM  On-Demand  Data 
Centers  in  the  Works 


Continued  from  page  1 

Hot  Servers 

both  those  combinations  make 
things  hotter  —  that’s  all  there 
is  to  it,”  said  Thomas  Roberts, 
director  of  data  center  opera¬ 
tions  at  Trinity  Health  in  Novi, 
Mich.,  which  operates  hospi¬ 
tals  and  outpatient  facilities. 

Roberts  said  he  would  like  to 
install  a  row  of  blade  servers  at 
a  disaster  recovery  site,  but  his 
14-inch  raised  floors,  which  are 
stuffed  with  cabling,  can’t  pro¬ 
duce  enough  air  pressure  to 
cool  the  servers.  “Not  everyone 
can  build  a  data  center  to  meet 
their  cooling  needs,”  he  said. 

Orange,  Calif.-based  AFCOM 
is  an  association  of  data  cen¬ 
ter  professionals. 

The  importance  of  cooling 
was  evident  to  conference  at¬ 
tendees,  said  Steve  Helms,  an 
IT  specialist  involved  in  data 
center  design  at  biotech  firm 
Amgen  Inc.  in  Thousand 
Oaks,  Calif.  He  noted  that  two 
of  the  biggest  displays  were 


for  power  and  cooling  equip¬ 
ment  suppliers  Liebert  Corp. 


Cool  Choices 

To  keep  today’s  fast  and  dense 
servers  from  overheating,  users 
have  the  following  options: 

VENDOR  APPROACHES 

■  American  Power  Conversion 
has  a  closed,  self-contained  unit 
for  supplying  power  and  cooling. 

■  Liebert  Corp.  offers  cooling 
coils  that  are  installed  above 
server  racks  to  draw  heat  out. 

■Vendors  are  developing 
technologies  for  cooling  the 
microprocessor  itself. 

■  Some  vendors  have  introduced 
water-cooled  racks. 

USER  APPROACHES 

■  Limit  the  number  of  units  in¬ 
stalled  in  server  racks. 

_ __ _ _ 

■  Reduce  wire  clutter  under  data 
center  floors. 

■  Correctly  position  equipment  to 
enhance  cooling. 


HThe  amount 
of  power  de¬ 
livered  and  required 
[by  servers]  far  ex¬ 
ceeds  our  current 
techniques  for  cool¬ 
ing  data  centers. 

BRUCE  EDWARDS,  PRESIDENT. 

CC6  FACILITIES  INTEGRATION  INC. 

in  Columbus,  Ohio,  and  Amer¬ 
ican  Power  Conversion  Corp. 
in  West  Kingston,  R.I. 

The  presence  of  those  ven¬ 
dors  and  others  focused  on  fa¬ 
cility  issues  is  “telling  me  that 
there  is  a  very  serious  issue 
out  there,  and  a  lot  of  people 
are  already  experiencing  it, 
and  the  rest  of  us  are  going  to 
get  it  soon,”  Helms  said. 

“Blade  servers  are  probably 
going  to  be  in  everybody’s 
data  center  sooner  or  later.” 

Cooling  “is  the  issue,”  said 
Bruce  Edwards,  president  of 
CCG  Facilities  Integration 
Inc.,  a  data  center  consultancy 
in  Baltimore.  Improper  cool¬ 
ing  can  shorten  a  server’s  life 
or  cause  failure,  he  said. 

“We  are  now  presented  with 
equipment  that  can  use  more 
power  then  ever  before  in  a 
smaller  footprint,”  he  said. 
“And  the  amount  of  power  de¬ 
livered  and  required  far  ex¬ 
ceeds  our  current  techniques 
for  cooling  data  centers.” 

Blade  server  racks  come  in  a 
variety  of  sizes  with  different 
levels  of  power  consumption. 
Large  rack  systems  with  98 
blades  spread  over  seven  chas¬ 
sis  can  consume  as  much  as  24 
kilowatts  of  power.  That  ex¬ 
ceeds  the  capacity  of  the  latest 
cooling  systems,  which  can 
handle  20  kilowatts,  manufac¬ 
turers  say. 

Patrick  Luma,  data  center 
manager  at  Stanford  Universi¬ 
ty,  said  he  would  like  to  see 
server  vendors  “concentrating 
less  on  condensing  the  size  of 
the  machines,  such  as  having 
gone  to  1U,  and  concentrating 
more  on  reducing  the  heat 


within  the  machine.”  A  1U  de¬ 
vice  is  1.75-in.  high. 

Vendors  said  they’re  work¬ 
ing  to  make  systems  more  ef¬ 
ficient  but  face  a  catch-22, 
with  some  users  complaining 
about  heat  and  others  calling 
for  more  speed,  said  Darrel 
Ward,  manager  of  server  tech¬ 
nology  and  product  planning 
at  Dell  Inc.  Dell  has  made  de¬ 
sign  trade-offs  for  its  1U  and 
blade  servers,  taking  a  moder¬ 
ate  approach  in  order  to  con¬ 
trol  heat,  he  said. 

Adding  cooling  technolo¬ 
gies  to  the  server  itself  will 
come  at  a  cost,  Ward  added. 

“If  you  introduce  something 
besides  traditional  fans,  heat 
sinks  and  airflows  to  a  com¬ 
modity  server,  that  $2,000 
server  is  not  going  to  be 
$2,000  anymore,”  he  said. 

Server  Economics 

Server  vendors  buy  industry- 
standard  components  but  try 
to  distinguish  themselves 
through  efficient  design,  said 
Scott  Tease,  worldwide  prod¬ 
uct  marketing  manager  for 
IBM’s  eServer  BladeCenter 
line.  For  example,  IBM  built  in 
cooling  technologies  that  di¬ 
rect  airflow  and  reduced  the 
number  of  heat-generating  fan 
motors,  Tease  said. 

The  economics  are  com¬ 
plex.  Very  dense  systems  may 
require  more  cooling  but  take 
up  less  real  estate.  However, 
data  center  consolidations  are 
increasing  the  sizes  of  IT  facil¬ 
ities.  Fast  processors  use  more 
power  to  deliver  greater  com¬ 
putational  capabilities  at  less 
wattage  per  MIPS,  but  this 
Moore’s  Law  advantage  is  off¬ 
set  by  users  who  install  more 
of  these  increasingly  powerful 
commodity  servers  in  their 
data  centers.  ©  49953 


MORE  ONLINE 

Mainframe  strategy:  IBM’s  new  road 
map  includes  adoption  of  the  CIM  standard: 

QuickLink  49934 

Mainframe  tools:  CA  zSeries  and  zOS 
tools  are  available  in  a  pay-as-you-go  plan: 

QuickLink  49928 
www.computenworld.com 


ATLANTA 

IBM  announced  last  week  that 
it  will  expand  the  number  of  its 
on-demand  data  centers  from 
one  to  11  by  the  end  of  the  year 
as  part  of  a  push  to  offer  users 
virtual  IT  resources  that  can,  in 
effect,  be  pooled  and  made 
available  where  needed. 

The  technology  underpin¬ 
ning  these  data  centers  can  be 
provided  as  an  outsourced  ser¬ 
vice  or  incorporated  into  a 
company's  existing  IT  infra¬ 
structure.  For  instance,  even  if 
a  user  doesn’t  want  to  adopt 
pay-as-you-go  pricing  with  a 
service  provider,  it  may  want  to 
use  the  model  to  measure  in¬ 
ternal  business  unit  consump¬ 
tion  of  IT  resources. 

The  cornerstone  of  this  of¬ 
fering  is  IBM’s  Universal  Man¬ 
agement  Infrastructure,  a  set  of 
software,  architecture  and  best 
practices  that  allows  multiple 
business  units  to  draw  on  virtu¬ 
alized  resources. 

“We  have  clients  today  that 
say  they  want  utility  infrastruc¬ 
ture  in  place  'that  allows  me  to 
scale  up  and  down  more  easily, 
that  allows  me  to  take  the  as¬ 
sets  that  I  have  in  my  data  cen¬ 
ter  and  make  them  more  effi¬ 
cient,’  ’’  said  Mike  Riegel,  direc¬ 
tor  of  IBM  Global  Services. 

Not  Sold 

But  some  users  appear  more 
willing  to  accept  the  idea  of 
deploying  an  architecture  for 
resource  pooling  than  moving 
to  an  outsourcing  model  with 
utility  pricing. 

Michael  Crumpler,  manager 
of  server  support  at  Atlanta- 
based  media  conglomerate  Cox 
Enterprises  Inc.,  is  a  heavy  user 
of  Sun  Microsystems  Inc.  serv¬ 
ers  and  said  he  has  heard  simi¬ 
lar  pitches  from  that  company. 
The  major  concern  Crumpler 
has  with  outsourced  models, 


regardless  of  whether  the 
equipment  is  at  an  outsourced 
location  or  in  his  data  center,  is 
the  issue  of  control.  With  on- 
demand  computing,  “I’m  not 
controlling  my  assets  any¬ 
more,”  he  said. 

Crumpler  said  he  isn’t  willing 
to  give  up  control  of  IT  opera¬ 
tions  except  for  servers  running 
noncritical  services,  such  as 
conference  room  scheduling. 

Dan  Rhoden,  a  data  center 
manager  at  Liberty  Mutual 
Group  Inc.  in  Indianapolis,  said 
he  has  similar  feelings.  “It’s  like 
your  personal  life. ...  The  stuff 
that  you  use,  you  want  to  own,” 
he  said. 

Crumpler  and  Rhoden  were 
among  the  data  center  man¬ 
agers  at  the  AFCOM  confer¬ 
ence  here  last  week. 

But  Ayman  Nassar,  data  cen¬ 
ter  manager  at  Prince  George’s 
Community  College,  a  30,000- 
student  school  in  Largo,  Md„ 
said  he’s  interested  in  the  utility 
model.  The  college  already  leas¬ 
es  its  hardware,  which  he  said  is 
a  first  step  toward  utility  pricing. 

"We  are  moving  toward  that 
model  of  paying  for  what  you 
only  really  need,  as  you  need 
it,”  he  said. 

IBM  operates  some  300 
data  centers  around  the  world, 
and  some  of  the  new  on- 
demand  centers,  which  are 
planned  in  the  U.S.,  Germany, 
Italy,  Sweden,  the  U.K.,  Aus¬ 
tralia,  Japan  and  Singapore, 
will  be  coupled  with  the  com¬ 
pany’s  existing  centers.  IBM 
plans  to  open  four  or  five  more 
on-demand  centers  in  early 
2005,  Riegel  said. 

-  Patrick  Thibodeau 


MORE  ONLINE 

For  additional  data  center  coverage, 
visit  our  Web  site: 

QuickLink  a5040 
www.computerworld.com 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Under  the  Volcano 


I’M  SITTING  HERE  under  the  volcano,  waiting.  (OK,  I’m  not 
actually  under  Mount  St.  Helens.  I’m  some  40  miles  away.  But 
that’s  plenty  close,  thanks.)  Some  days,  I  can  watch  the  vol¬ 
cano  spit  clouds  of  steam  and  ash  thousands  of  feet  into  the 
sky,  as  experts  say  a  major  eruption  could  be  hours  away.  Oth¬ 
er  days,  the  same  experts  say  it  might  be  months  or  even  years  be¬ 
fore  anyone  in  my  neighborhood  has  something  to  worry  about.  But 
there  are  still  reports  that  small  earthquakes  constantly  shake  the 
volcano  and  that  the  lava  dome  is  rising.  I  know  that  sooner  or  later, 
something’s  going  to  happen. 

If  you’re  a  PeopleSoft  customer,  you  probably  feel  that  way  too. 


After  all,  since  the  start  of  October,  the  De¬ 
partment  of  Justice  has  given  up  on  its  efforts  to 
block  Oracle  from  buying  PeopleSoft,  and 
PeopleSoft’s  board  has  fired  Craig  Conway,  the 
antitakeover  CEO  who  had  just  spent  a  week 
reassuring  customers  at  the  company’s  annual 
user  conference.  PeopleSoft’s  board  is  still  re¬ 
jecting  Oracle’s  takeover  bids  but  now  says  it’s 
willing  to  do  a  deal  if  the  price  is  right. 

And  PeopleSoft  users?  You  know  something’s 
going  to  happen.  You  can’t  stop  it,  you  can’t 
choose  the  timing,  and  you  don’t  know  exactly 
what  sort  of  chaos  will  come  raining  down  on 
your  heads.  You  just  know  the  situation  could 
blow  up  on  you  at  any  time.  And  the  experts  — 
the  pundits,  analysts  and  columnists  —  say  the 
deal  could  come  within  weeks  and  it’s  probably 
too  late  for  you  to  do  anything  to  prepare  for  it. 

Of  course,  we’ve  heard  that  before. 

Specifically,  we  heard  it  during  the  summer 
of  2003  —  just  after  Oracle  announced  its  play 
for  PeopleSoft.  Back  then,  pretty  much  all  the 
experts  agreed  that  PeopleSoft  couldn’t  stave 
off  Oracle’s  hostile  bid  for  long.  And  that  when 
Oracle  CEO  Larry  Ellison  an¬ 
nounced  that  he  wouldn’t  be  selling 
PeopleSoft  products  after  the 
takeover,  it  was  already  too  late  for 
PeopleSoft’s  current  customers  to 
avoid  becoming  orphans. 

PeopleSoft  users  were  out  of  time 
and  out  of  luck,  the  experts  said. 

And  the  experts  were  . . .  well,  a 
little  bit  off. 

If  you  had  listened  to  the  experts 
—  if  you  had  believed  it  was  too  late 
to  do  anything  —  you’d  have  lost  the 
past  16  months.  You  wouldn’t  have 
spent  that  time  developing  contin¬ 


gency  plans.  And  renegotiating  contracts.  And 
smoothing  out  your  PeopleSoft  implementa¬ 
tion,  in  case  you  needed  to  migrate. 

You  can  get  a  lot  done  in  16  months.  You  did 
get  a  lot  done  in  that  16  months,  didn’t  you? 

If  you  did,  you  already  know  what  to  think  of 
the  most  recent  pronouncements  from  the  in¬ 
dustry’s  deep  thinkers.  Yes,  maybe  PeopleSoft’s 
board  will  accept  a  sweeter  Oracle  offer.  Maybe 
it  is  now  inevitable.  After  all,  Oracle  has  been 
sliding.  Right  now,  Oracle  needs  a  PeopleSoft 
deal  —  and  needs  to  keep  PeopleSoft’s  cus¬ 
tomers  happy,  too. 

Maybe  a  month  or  two  from  now,  that  deal 
will  be  done. 

On  the  other  hand,  maybe  Oracle  won’t 
sweeten  the  deal  enough.  Maybe  the  PeopleSoft 
board  will  change  its  mind.  Maybe  the  lawsuits 
over  the  deal  will  have  to  grind  through  to  their 
verdicts  and  appeals.  Maybe  Oracle  will  drop 
its  bid.  That  deal  might  not  close  for  years.  It 
may  never  close. 

So  when  the  pundits,  analysts  and  columnists 
tell  you  it  may  be  too  late  for  PeopleSoft  cus¬ 
tomers  to  do  anything  in  the  face  of 
a  once-again-impending  Oracle 
takeover,  consider  their  record. 

Then,  if  you  haven’t  already,  start 
working  out  those  contingency 
scenarios.  Start  squaring  up  your 
installation,  just  in  case.  Start  mak¬ 
ing  plans  and  considering  choices. 
If  you  really  are  out  of  time  and 
luck,  you’ll  waste  a  little  effort.  But 
if  it  turns  out  you’ve  got  another 
year  or  two,  you’ll  have  made  good 
use  of  it. 

And  this  is  one  volcano  you  can’t 
afford  to  just  wait  for.  ©  49913 


frank  haves,  Computer- 
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Where  There’s  Smoke . . . 

“I  think  my  monitor  is  on  fire!"  user  tells  help  desk  pilot 
fish.  Call  the  fire  department,  fish  says  immediately. 
“But  can’t  you  just  come  look  at  it?”  user  asks.  “I  don’t 
see  flames,  but  it  went  black  and  I  smell  smoke.” 

Hang  up  and  call  the  fire  department!  fish  tells  her.  So 
she  does.  “They  came  and  took  her  burned  popcorn 
out  of  the  microwave,”  sighs  fish.  “And  her  screen 
came  back  when  she  moved  her  mouse." 


Oops! 

At  this  state 
agency,  the 
administrator 
password  is 
changed  regularly  on  all 
3,000  PCs.  “We  are  also 
reminded  regularly  by 
the  network  security  su¬ 
pervisor  that  disclosing 
this  password  is  grounds 
for  disciplinary  action,” 
says  an  IT  pilot  fish 
there.  But  one  day,  just 
hours  after  the  change, 
an  order  comes  downlo 
change  it  again.  Why? 
Fish  reports,  “It  leaked 
out  that  the  network  se¬ 
curity  supervisor,  in  his 
haste  to  get  something 
done,  inadvertently  di¬ 
vulged  the  network 
password  to  an  outside 
contractor.” 

Bugs?  Naah! 

It’s  the  late  1970s,  and  a 
secretary  discovers  an 
easy  way  to  spend  work 
time  with  her  co-worker 
boyfriend:  using  the 
command  to  move  the 
cursor  on  a  mainframe- 
based  text  editor  to  Line 
0.  That  causes  a  crash, 
and  everyone  gets  a  20- 
minute  break.  “Finally, 
someone  ratted  on  the 
secretary  and  told  IT,” 
says  a  user  pilot  fish. 
“But  these  higher  beings 
in  IT  refused  to  believe 
until  it  was  demonstrat¬ 
ed:  Line  0,  and  down 
goes  the  mainframe. 
There's  nothing  funnier 


than  seeing  15 
IT  jaws  drop  to 
the  floor  at  the 
same  time.” 

That’s  Not  It 

Pilot  fish  watches  two 
software  testers  working 
on  a  complex  workflow 
project.  One  tester’s  test 
scripts  keep  failing, 
while  the  other’s  scripts 
run  fine.  “Tester  1  even 
asks  Tester  2  to  run  one 
of  his  tests,  and  then  the 
test  completes  just  fine,” 
says  fish.  “So  he  says  to 
Tester  2,  ‘I  can  see  your 
tests  look  OK,  and  mine 
have  failed.  Should  we 
swap  computers?’  ” 

You  Know,  the 
Anonymous  Ones 

Pilot  fish  sends  out  an 
employee  satisfaction 
survey  as  a  Web  form 
embedded  in  e-mail. 

That  way,  responses  re¬ 
main  completely  anony¬ 
mous,  users  are  assured. 
Next  day,  one  user  com¬ 
plains  to  fish  that  he’s 
tried  sending  the  form 
three  times,  but  there’s 
still  nothing  in  his  e-mail 
out-box.  “What  kind  of 
system  makes  us  fill  out 
a  lengthy  survey  and 
then  not  even  send  it?” 
user  grumbles.  Fish  ex¬ 
plains  it’s  sent  via  the 
Web  to  keep  it  anony¬ 
mous.  “Oh,”  user  says. 
“Well  then,  just  remove 
my  extra  answers  from 
your  database.” 


SHARK 

TANK*, 


OBE  ANONYMOUS  FOR  SHARKY.  Send  me  your  true 
tale  of  IT  life  at  sharky@computerworld.com.  You 
get  a  sharp  Shark  shirt  if  I  use  it.  And  check  out  the  daily 
feed,  browse  the  Sharkives  and  sign  up  for  Shark  Tank 
home  delivery  at  computerworld.com/sharky. 
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Samsung’s  193P  display. 

We  know  how  business  works.  We've  spent  years  researching  the  subject, 
which  allows  us  to  engineer  monitors  that  fit  the  people  who  use  them. Gut 
193P  display  is  ergonomically  designed  to  move  the  way  people  move.  And.  ' 
with  its  MagicTunew  software,  personalizing  the  display  is  now  a  hands-free 
experience.  This  kind  of  thinking  is  responsible  for  over  67  design  awards 
worldwide.  Not  to  mention,  monitors  that  work  on  the  same  level  as  you. 


19"  Analog/Digital  TFT-LCD 
Full  pivot,  tilt  and  swivel;  wall  mountable 
1787178°  —  Widest  viewing  angle  of  any  LCD 
MagicTuneT“  on  screen  image  control 


Visit  www.samsungusa.com/monitor  or  call  1-800-SAMSUNG 


02004  Samsung  Electronics  America,  Inc.  Samsung  and  MagicTune  are  registered  marks  of  Samsung  Electronics  Corp..  Ltd.  Screen  images  simulated. 
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Oracle  Application  Server 

"Oracle  Portal  is  a 

powerhouse" 

Network  Computing ,  5/13/04 


Oracle 

AS  lOg 
Portal 

IBM 

WebSphere 
Portal  5.0 

Microsoft 
Office  Share 
Point  Portal 
Server  2003 

BEA 

WebLogic 
Portal  8.1 
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Security  Features  (10%) 

4 

3 

3 

2 

-  Price  (5%) 

5 

3 

5 

4 

}  TOTAL  SCORE  (100%) 

4.25 

3.45 

3.40 

2.70 

Total  scores  and  weighted  scores  are 
based  on  a  scale  of  0-5. 
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